Using Block and Allow Profiles with Custom URL Categories

Symptoms

Custom URL categories are used to allow people to browse certain web sites and block all the rest. Two custom URL categories were created, and the other sites were put in a block list (identified by *.*).

The result is that the sites that are allowed to access are still blocked.

Issue

The firewall looks at the profile block list first, then the allow list, then custom categories. If two custom categories are triggered for a specific URL, the most severe action is performed. So if one is set to allow and the other block, the firewall will block it.

Resolution

Put allowed sites in the profile allow list, then add blocked sites in a custom category.

owner: panagent