How to resolve validation Error for custom URL category entries that includes consecutive asterisks
16205
Created On 08/05/19 14:00 PM - Last Modified 01/06/21 03:43 AM
Objective
Commit failed with validation error for custom URL category entries :
profiles -> custom-url-category -> iVPN Allowed URLs -> list '*.*.nna/*' is invalid. profiles -> custom-url-category -> iVPN Allowed URLs -> list '*.*.verisign.com' is invalid. profiles -> custom-url-category -> iVPN Allowed URLs -> list '*.*.verisign.com/*' is invalid.
Environment
- PAN-OS 8.1 and above.
- Custom URL Category configured.
Procedure
- Consecutive asterisks (*) in URL category definition is not supported. Replace the (*) asterisk with matching entry such as carets(^) or words
- Validate and Commit should work fine after this change.
Additional Information
Do not create an entry with a consecutive asterisk (*) wildcards or more than nine consecutive carets (^) wildcards. These can affect firewall performance.
Refer to URL Category Exceptions for additional details.