Overrides tab in URL filtering missing after upgrade.
14825
Created On 07/17/20 02:59 AM - Last Modified 09/25/20 00:10 AM
Symptom
Release versions earlier than PAN-OS 9.0 allowed you to configure URL Filtering Overrides to create exceptions to URL category enforcement, This feature "URL Filtering Overrides" no longer exists in later PAN-OS versions.
GUI: Objects > Security Profiles > URL Filtering > (name):
Display in PAN-OS 8.1:
Display in PAN-OS 9.0 :
Environment
- PAN-OS 9.0 and above.
- Palo Alto Firewall.
Cause
- This is expected (By Design), The option to configure URL Filtering block and allow lists is available when you create or modify a URL Filtering custom object ( GUI: Objects > Custom Objects > URL Category > Add)
- Contents of URL Filtering block and allow lists (including lists that you configured before upgrading to PAN-OS 9.0) are now displayed in the URL Filtering profile Categories tab.
- To configure exceptions to URL categories, you can create a custom URL category ( GUI: Objects > Custom Objects > URL Category).
Resolution
- To configure exceptions to URL categories, you can create a custom URL category (GUI: Objects > Custom Objects > URL Category > Add), the below screenshot illustrate the process.
- After adding the custom URL category commit the change.
- To configure an action for the custom URL category under URL filtering action (GUI: Objects > URL filtering > Add), the below screenshot illustrates the process.
- Use the above example to add other URL categories.
- Now the newly added URL category can be used in any security policy.
- The last step is to commit the changes.
Additional Information
More information can be found in the below link:
Upgrade/Downgrade Considerations
Create a Custom URL Category