About dyang

dyang · ‎08-22-2011

By default, the cache has a timeout value of 24 hrs. We recently identified a bug recently where this variable was not getting configured properly, but this should be addressed in a future release (meaning you'll be able to configure this to a number of your choosing).

dyang · ‎08-22-2011

Just to elaborate a little more, URLs are cached on your device, so even if you see a category update via the BrightCloud website, you must wait for the device cache to expire before it can pick up the new categorization. Clearing your entire cache will certainly force a cloud lookup since the URL in question would no longer be cached on your device, but do keep in mind that you would be clearing your entire cache.

dyang · ‎08-22-2011

Hi Jeff, The option for Dynamic URL filtering allows the device to query the BrightCloud server when a URL is not found on-device. Essentially, what this does is allows you to have access to the master database and not be limited to the entries on your device. In regards to certain parts of cnn.com, msnbc.com, msn.com, etc getting blocked, please check your URL filtering logs for a better explanation. As mentioned in a previous post, sites often pull content from other sites which are often categorized as web-advertisements, content-delivery, etc, which depending on your URL filtering profile, could be blocked. Check your URL filtering logs to see what these category these were and then check your URL filtering profile to confirm. Hope this helps, Doris

dyang · ‎08-18-2011

Hi everyone, BrightCloud uses both automated and manual processes to categorize URLs, and is always making improvements in their process to reduce the number of mis-categorized URLs. Though BrightCloud allows anyone to request a re-categorization via their website, there are checks in place to prevent abuse of this service, such as intentionally submitting an incorrect category. If you have any examples of this happening, please open a ticket with Palo Alto Networks Support so that we can address this with BrightCloud. As always, we welcome any feedback regarding our products! Thanks, Doris

dyang · ‎08-17-2011

Hello, Thanks for your patience and feedback regarding mis-categorized URLs. In terms of submitting bulk requests to BrightCloud for re-classification, you can always use the email alias dbchange@brightcloud.com for submission. Alternatively, you can also open a support case with Palo Alto Networks, and we can push BrightCloud to re-evaluate the URLs in question. I definitely agree that bmw.com should have the same categorization as bmw.co.za! Again, thanks for your patience and your assistance in maintaining the quality of the URL filtering database! Cheers, Doris

dyang · ‎08-10-2011

Thank you all for your feedback! We certainly appreciate the need for this feature and are currently investigating the best way to address this.

dyang · ‎08-03-2011

Hi Nebtir, The following actions are available for URL categories: Allow—Permit access to the web site. Alert—Allow the user to access to the web site, but add an alert to the URL log. Continue—Allow the user to access the blocked page by clicking Continue on the block page. Override—Allow the user to access the blocked page after entering a password. Block—Block access to the web site. If you would like to permit access to category "webmail", you can use either the Allow or Alert action, depending on whether or not you want the events logged in the URL filtering log. Hope this helps, Doris

dyang · ‎07-23-2011

Hi Dave, Thanks for your feedback! Generally speaking, new categories are rarely added (though they can be, if genuinely necessary), so hopefully this is a one-time setup issue for you (unless you need to change your URL filtering profile). That said, you are always welcome to contact your sales rep to have feature requests submitted. Thanks, Doris

dyang · ‎07-23-2011

Paul, As Manish stated above, you may only configure one block page per VSYS. That said, however, you can customize the block page to display different text depending on the category. You can refer to this document for more information regarding customizing block pages: Customizing Block Pages Some example code for customizing messages per category: var cat = "<category/>"; switch(cat) { case 'games': document.getElementById("warningText").innerHTML = "Message 1"; break; case 'travel': document.getElementById("warningText").innerHTML = "Message 2"; break; case 'kids': document.getElementById("warningText").innerHTML = "Message 3"; break; }

dyang · ‎07-23-2011

Actually, the URL databases posted on the support site should be signed, in which case you will need to use the command: scp import signed-url-database

dyang · ‎07-23-2011

Hi Jerry, You can clear the cache by using the CLI command "clear url-cache". Again, please keep in mind that this does clear your entire cache, not just a single entry. On the other hand, cache entries by default expire in 7 days, though that can be configured to a value of your setting. For PAN-OS 3.1 devices, I believe this setting can be found on the Device-->Setup tab, under Dynamic URL Cache Timeout. If, after clearing the cache and/or waiting for the timeout to expire you are still experiencing problems, I would suggest that you upgrade to 3.1.9, as there were some bugs that addressed caching issues. Hope this helps, Doris

dyang · ‎07-22-2011

Hi Jerry, You can verify that BrightCloud has updated the URL in question by checking: brightcloud.com/support/lookup.php While BrightCloud may have updated their database, if your device previously saw traffic to this URL, it would have stored the information in the on-device cache. Since the cache gets checked first, you will need to either wait for the URL entry to timeout (at which time it will check the BrightCloud server for an updated category), or you can clear your cache to force a lookup to the on-device database. Keep in mind that if you clear your cache, you will lose all other entries in the cache. Hope this helps, Doris

dyang · ‎07-21-2011

FYI, this should be addressed in an upcoming release.

dyang · ‎07-12-2011

We're still looking at the issue - we have some PCAPs and can reproduce the behavior, though research is still on-going. More updates as they come, Doris

dyang · ‎07-07-2011

Just a quick update, the Support team is currently working to reproduce this issue. I'll provide more details as they become available. Thanks for all your patience, Doris

Member Since	‎01-03-2011 02:54 PM
Date Last Visited	‎08-18-2015 09:06 AM
Posts	233
Total Likes Received	56

Online Status	Offline
Date Last Visited	‎08-18-2015 09:06 AM

About dyang

Re: Safe Search Enforcement

Re: PA URL FILTERING UPDATES force to update the HA peer

Re: Newly registered domains - how does PANDB classify them?

Re: Browse Time in custom reports

Re: Newly registered domains - how does PANDB classify them?

Re: URL Filtering Log shows FORWARD

Re: URL Filtering Log shows FORWARD

Re: URL Filtering Log shows FORWARD

Re: wildfire findings into the pan-db

Re: Safe Search Enforcement blocking all Google / Bing / YouTube searches

Re: Block traffic to ip addresses

Re: All sites registering as "unknown"

Re: All sites registering as "unknown"

Re: commented file type list available?

Re: URL Category Any

Re: URL Filtering - PANDB vs. Brightcloud

Re: URL Filter update - users not seeing changes?

Re: URL Filter update - users not seeing changes?

Re: Trying to block only certain websites using 3.1.6

Re: BrightCloud missing the Plot!

Re: BrightCloud missing the Plot!

Re: Controlling SafeSearch Option

Re: Is there any way to allow on url categories a user group

Re: Configuring URL filtering from command line

Re: Multiple Block Pages?

Re: How to install URL database By file?

Re: bright cloud updates 3.16

Re: bright cloud updates 3.16

Re: file blocking continue page issue

Re: file blocking continue page issue

Re: file blocking continue page issue

Unlock your full community experience!

About dyang