This whole issue was pretty bad. We had AD authentication issues at our main site for about 12 hours. Stupid thing abou the entire issue is the notification process from PA. We had gotten the notification about 729 being an issue but had no details on what the symptoms were. It would have been so easy (and helpful) for PA to have included SOME/ANY DETAILS about the type of problems with the initial notification or a LINK TO FURTHER DETAILS. It wasn't until we found a community thread indicating Microsoft AD authentication traffic was affected that we rolled back and life was good again. Simple communication would have been so helpful.
... View more
Hi, It seems it is not picking up that wildcard. I tested the same in my lab (4.1.9). Got the same result with the wildcard but putting 'www.google.com' in the custom category returned the expected custom category : admin@PA-500> test custom-url rule rule1 url www.google.com Custom category matched: blah, action: alert EDIT : Actually it does work on my LAB ... I messed up my previous lab config. However, after correcting it does return the correct result using a wildcard : <custom-url-category> <entry name="blah"> <list> <member>*.google.com</member> </list> <description>blah</description> </entry> </custom-url-category> admin@PA-500> test custom-url rule rule1 url www.google.com Custom category matched: blah, action: alert Guessing a PanOS upgrade might just resolve the issue. -Kim. Kind regards, -Kim
... View more