05-03-2012 02:53 AM
Is there any update on the issue discussed here - https://live.paloaltonetworks.com/message/7468
as mentioned in that thread, if you allow translation you can access sites in blocked categories. This is despite Google including the original URL in the translated URL.
IMO the PAN firewall should be able to parse out any additional domains in a URL and filter on them - in the case of Google Translate, there is an application defined for this so it should be possible to do "if application = Google Translate, find the extra URL category and filter on that". We're moving from a Fortinet system that does exactly this, it parses out all domains in a URL and filters on the most restrictive one - PAN's URL filtering is deficient in this regard by comparison.
