Custom URL Category Parsing

Custom URL Category Parsing

2843
Created On 04/24/19 11:13 AM - Last Updated 04/25/19 17:40 PM


Symptom
Test security policy command failed with error “Server error: Unrecognized category” for custom category.

Test security-policy-match command is useful to determine whether a security policy rule is matching correctly. But this command may fail with error “Server error: Unrecognized category” when you try to check the policy for filter custom URL category.

User-added image


Environment
Multi-vsys environments

Cause
Custom categories stored in vsys with a vsys name as a prefix. You can check the correct name that you need to use in the test policy with this command:
 > debug device-server dump idmgr type vsys-custom-url-category all

User-added image


Resolution
The test command with correct custom URL category name:
 > test security-policy-match from L3-Trust source 192.168.156.10 to L3-Untrust destination 23.41.44.222 category vsys1+Custom_URL protocol 6 destination-port 80

User-added image


Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLjeCAG&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments