How to Block Github but allow some sub-domain

• PANOS 8.1 only
• Palo Alto Firewall.

1. Select Objects  > Custom-objects > url-category. Click Add then create URL-category with example name of "Github Custom category" and Add Github.com under Sites tab .select OK.

2. Select Objects > Security profile > Url-filtering.  Click Add then create URL Filtering Profile with example name of "Github-profile". select Categories Tab and scroll down to find "Github Custom category " then change Site Access value and User Credential Submission value as block.

3. Select Overrides Tab and Add the URLs listed below under Allow List Tab.
   • github.com/login
   • github.com/session
   • github.com/sessions/verified-device

4. Now you may add any additional GitHub subdomains to the allow list as needed.
5. Select target Security Policy  > Action > Profile Setting > Url Filtering and select "Github-profile" from drop down menu.

6. Select Commit .

Also refer How to Allow a sub URL while blocking a website

How to Create Custom URL Categories