Custom URL Category Parsing
10676
Created On 04/24/19 11:13 AM - Last Modified 04/25/19 17:40 PM
Symptom
Test security policy command failed with error “Server error: Unrecognized category” for custom category.
Test security-policy-match command is useful to determine whether a security policy rule is matching correctly. But this command may fail with error “Server error: Unrecognized category” when you try to check the policy for filter custom URL category.
Environment
Multi-vsys environments
Cause
Custom categories stored in vsys with a vsys name as a prefix. You can check the correct name that you need to use in the test policy with this command:
> debug device-server dump idmgr type vsys-custom-url-category all
Resolution
The test command with correct custom URL category name:
> test security-policy-match from L3-Trust source 192.168.156.10 to L3-Untrust destination 23.41.44.222 category vsys1+Custom_URL protocol 6 destination-port 80