Block High Risk Category but allow Unknown Category

If you want to allow the URL category Unknown yet still block other High Risk URLs, then this document will go over how to accomplish this goal.  Starting with PANOS 9.0, URLs are now given multiple categories.

URL Filtering: Assigning Multiple Categories to URLs



 

1.  In the WebGUI of the firewall go to Objects > Custom Objects > URL Category > Click on Add
2. Type (Pulldown): Select “Category Match”. Give it a name. Add Categories Unknown and High-risk to the list, click OK
3. Then go to the URL Filtering profile, you will find it as a new category with the name you gave the custom object. 
4. Now you can define a specific action for the combo unknown+high-risk to allow.