Is it good idea to block Unknown URL category?

Is it good idea to block Unknown URL category?

14683
Created On 01/17/20 02:19 AM - Last Modified 07/08/20 01:45 AM


Question


Is it good idea to block Unknown URL category?

Environment


  • Any Palo Alto Firewall.
  • Any PAN-OS.

Answer


  1. When setting block for Unknown URL category, be aware this setting  may be very disruptive to users because there could be a lot of valid sites that are not in the URL database yet.
  2. If you do want a very strict policy, you could block this category, so websites that do not exist in the URL database cannot be accessed.
  3. Deciding to block or allow is dependent on the network policy appropriate for your environment.

Additional Information


    Palo Alto Networks collects the list of URLs from the unknown category and processes them to determine the URL category.
    These URLs are processed automatically, everyday, provided the websites has machine readable content that is in a supported
    format and language. Upon categorization, the updated category information is made available to all PAN-DB customers.
    Other users also viewed:
    Actions
    • Print
    • Copy Link

      https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POG1CAO&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

    Choose Language