How to Block Github but allow some sub-domain
14020
Created On 04/16/20 18:53 PM - Last Modified 01/10/24 17:42 PM
Objective
How Github.com but allow some sub-domain (include login credential page)
Environment
- PANOS 8.1 only
- Palo Alto Firewall.
Procedure
- Select Objects > Custom-objects > url-category. Click Add then create URL-category with example name of "Github Custom category" and Add Github.com under Sites tab .select OK.
- Select Objects > Security profile > Url-filtering. Click Add then create URL Filtering Profile with example name of "Github-profile". select Categories Tab and scroll down to find "Github Custom category " then change Site Access value and User Credential Submission value as block.
- Select Overrides Tab and Add the URLs listed below under Allow List Tab.
- github.com/login
- github.com/session
- github.com/sessions/verified-device
- Now you may add any additional GitHub subdomains to the allow list as needed.
- Select target Security Policy > Action > Profile Setting > Url Filtering and select "Github-profile" from drop down menu.
- Select Commit .
Additional Information
Also refer How to Allow a sub URL while blocking a website
How to Create Custom URL Categories