You should consider using "application filters" instead of URL filtering. Social Networking sites is a great example. Creating this one App Filter Object named Social Networks, and selecting the subcategory of "social-networking" gives me an object with 88 applications included. If I selected "browser based" as well, the number would reduce to 76 applications. Now I can use this in a security rule to deny or allow sites. The beauty of this is that in a year there may be one or two new sites that pop up and become popular. As soon as they are detected by Paloalto and added to the database, your existing rule will already be in place and include the new sites based on the subcategory. SKrall
... View more