When does a URL get categorized as 'newly-registered-domain'?
39651
Created On 03/27/20 15:47 PM - Last Modified 04/22/24 20:11 PM
Question
When does a URL get categorized as 'newly-registered-domain'?
Environment
- Palo Alto Firewall.
- Any PAN-OS.
- PAN DB URL Filtering.
Answer
URLs are categorized as a 'newly-registered-domain' when the domain has been registered (Passive DNS is observed) within the last 32 days. After this period, Palo Alto Networks will crawl the URL to determine if it needs to be re-categorized. If this is unsuccessful, the crawler then tries again at 3 day, 7 day, 2 week, and 30 day markers. By the last day if the crawler cannot determine the content, the URL will be categorized as "unknown".