About dyang

Hi Nalin, Thanks for your feedback.  Submitting a change request is the best way to provide feedback on mis-categorizations.  Not only does this allow us to make the change for the specified URL, but it also allows us to take a look from a bigger picture perspective to see how we can correct the classification engine for those types of URLs/category.  As I'm sure you know, you can submit change requests directly from the device, or from our website: Palo Alto Networks URL Filtering - Test A Site This allows you to submit them individually as well as by bulk.  I can see that you've already submitted a change request for kennelreg.co.uk, but I'll go ahead and file one for the other two examples you provided. That said, in terms of URLs that initially show up as "unknown", please know that any unknown URL automatically triggers a process on our back-end that takes all unknowns and places them in a prioritized queue for crawling and classification.  What this means for you is that while a URL may show up as unknown in your logs, they should get categorized and included in the database shortly.  No action is required on your part, but you are obviously also welcome to submit a change request for these if you want to provide your suggested answer.  In any case, if your device continues to see traffic to this URL, you should see it switch from "unknown" to a known category. Hope this helps, Doris ... View more

Just a quick correction to HULK response above.  The correct URL lookup sequence is block list --> allow list --> custom categories --> predefined categories. ... View more

Hi smedeiros, The URL response pages can be customized, but they are displayed per user, per configured URL category.  There is no way to configure this to display when a user first opens their browser.  While I understand what you're trying to achieve by periodically displaying your company's AUP, choosing to do this when a browser window is open may not be practical, given that end-users often leave their browsers open for a long period of time, and just open/close browser tabs. --Doris ... View more

Hi d.ballam, Just wanted to be sure that you tried going to the site again.  Any existing logs will still show the category logged at the time, but any new traffic to the URLs in question should generate new logs that reflect the new category.  --Doris ... View more

Hi d.ballam, BrightCloud did have an issue about a month ago where googleapis.com was miscategorized as spyware and adware.  However, this was fixed, and I have also confirmed that these sites are categorized correctly today.  Given that you are still seeing the wrong category on your device, you may still have the old category saved in your device cache.  Can you try using the CLI command "clear url-cache all" to purge your cache and try again? --Doris ... View more

Hi slv, Can you provide more details about why you feel this site is malicious?  --Doris ... View more

Hi Hartkently, Just to clarify, you should really never need to re-download the PAN-DB seed database.  As you already know, the seed database is initially downloaded during the PAN-DB activation process, and is a collection of the top X domains in a selected region, and is used to help initiate your cache so that you don't start with an empty cache.  If you choose to re-download the seed database at a future time, it will actually re-initialize your cache, which essentially means we clear your entire cache and fill it with the contents of the seed database. If you feel that there is a need to refresh a single entry in your cache, you can always use the following CLI commands to do that, instead of sacrificing the entire cache: clear url-cache url <URL> clears the DP cache delete url-database url <URL> clears the MP cache (you'll need to do both) Hope this helps, Doris ... View more

Hi Ahmed, Google made a change a few months ago to the way they implement YouTube Safety Mode, which affects our ability to accurately identify this traffic with our youtube-safety-mode App-ID signature.  As such, the App-ID for YouTube Safety Mode will likely not show up anymore.  If you would like to enforce YouTube Safety Mode, you can do this via a URL filtering feature, "SafeSearch Enforcement".  When enabled, any Google, Yahoo or Bing web searches will be checked to make sure that the strictest Safe Search setting is enabled, and this applies to YouTube Safety Mode as well.  If the settings are correct, the search is allowed.  Otherwise, a block page is displayed, with instructions on how to correctly fix their settings.  Once this has been done, all subsequent searches will go through.  In order to ensure that YouTube Safety Mode is covered, please be sure to install content version 422 or later. Thanks, Doris ... View more

To submit a change request for a URL that you feel is mis-categorized, you can do this directly from the device logs (detailed log view).  If you're using BrightCloud, the "request categorization change" link will take you to the BrightCloud website, but if you're using PAN-DB, a form will appear, and you can make your submission directly from the UI. If you'd like to make submissions directly from our websites, you can do so by using either: URL/IP Lookup | Webroot BrightCloud Palo Alto Networks URL Filtering - Test A Site ... View more

Hi everyone, BrightCloud originally had this miscategorized last week, but published a fix last Thursday (v4274).  However, as many of you noticed, the category reverted back to "spyware and adware" on Tuesday due to a hard drive failure with BrightCloud's master database.  During their disaster recovery process, they restored an earlier version of the database that included the miscategorization.  This has since been fixed and googleapis.com is now correctly categorized as "business and economy" again. --Doris ... View more

Hi Chris, What is the error message that you get? --Doris ... View more

I'll let others chime in on their experiences, but as an FYI, you can always find the current list of PAN-DB supported languages here: PAN-DB Supported Languages We're continually working on support for additional languages, so if you are interested in support for a language that is not listed here, please let your account team know (or post here) so that we get the feedback. Thanks, Doris ... View more

Hi NPTECH, As mentioned above, YouTube Safety Mode is included as part of the SafeSearch Enforcement feature in PAN-OS 6.0, provided that you've updated your content to version 422 or later.  If you've done this and are not seeing support for YouTube Safety Mode, please open a case with Support. --Doris ... View more

Hi NPTECH, We used to be able to detect YouTube Safety Mode via an App-ID, but due to recent changes in Google's implementation, this no longer works.  As such, you must rely on the PAN-OS 6.0 Safe Search Enforcement feature to enforce YouTube Safety Mode in your environment. --Doris ... View more