Palo Alto Networks Knowledgebase: URL Categorization of SSL Websites

URL Categorization of SSL Websites

4916
Created On 02/07/19 23:41 PM - Last Updated 02/07/19 23:42 PM
Policy
Resolution

URL category will only apply to traffic that is valid HTTP/HTTPS.  In the case of non-http traffic, the URL category is ignored as a matching criteria by design.

URL categorization will happen for SSL regardless of whether it is HTTP inside or not. It is not possible to tell what protocol is inside without SSL Decryption so the categorization is done either by IP or via the Common Name from the SSL certificate or Server Name Indication (SNI). 

 

owner: ppatel



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClzlCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language