About BetterGriffin

BetterGriffin · ‎03-12-2019

to answer your first question " So is URL Category in Security Policy only applied when the application is web-browsing/ssl and port is 80/443 ?" i believe the answer is no. the url category can match on any port or application. as for a possible solution to the problem; have you tried using a seperate security profile with a custom url-filtering profile that allows the category?

BetterGriffin · ‎03-08-2019

@BPry Thanks for the info! this is very helpfull

BetterGriffin · ‎03-08-2019

When using Multi-Category URL filters what is the expected behavior when a URL matches two categories with different actions? for example if i access a site that is classified as shopping and sports but my policy says block shopping sites but allow sports, will i be able to get to the site?

BetterGriffin · ‎03-08-2019

i have not notice a performance hit on the CPU when using app-id. the only hit I've notice is when i enabled decryption and/or inbound inspection hope this helps

Date Registered	‎11-20-2018 08:15 AM
Date Last Visited	‎07-20-2019 04:52 PM
Total Messages Posted	4
Total Likes Received	1

Online Status	Offline
Date Last Visited	‎07-20-2019 04:52 PM

About BetterGriffin

Re: URL Category in Security Policy only for http?

Re: PAN-OS 9.0 Release Features: DNS Security and Content Inspection

Re: PAN-OS 9.0 Release Features: DNS Security and Content Inspection

Re: using rules on application base and cpu overhead?

Re: URL Category in Security Policy only for http?

Re: PAN-OS 9.0 Release Features: DNS Security and Content Inspection

Re: PAN-OS 9.0 Release Features: DNS Security and Content Inspection

Re: using rules on application base and cpu overhead?

Re: using rules on application base and cpu overhead?

Re: The Rule is allowed but hit policy-deny?

Re: PAN-OS 9.0 -go live?

Re: PAN-OS 9.0 Release Features: DNS Security and Content Inspection

Strata

Prisma

Cortex

About BetterGriffin