Error:
An unexpected error occurred. Please click Reload to try again.
Error:
An unexpected error occurred. Please click Reload to try again.
How to whitelist or blacklist in URL Filtering in PANOS 9.0.x a... - Knowledge Base - Palo Alto Networks

How to whitelist or blacklist in URL Filtering in PANOS 9.0.x and above

67271
Created On 02/13/21 20:40 PM - Last Modified 07/26/22 01:58 AM


Objective


  • Whitelist or blacklist in URL Filtering using PANOS 9.0.x and above versions
  • Release versions earlier than PAN-OS 9.0 allowed you to configure URL Filtering Overrides to create exceptions to URL category enforcement.
  • In PAN-OS 9.0, the URL Filtering profile Overrides tab, where you would configure these block and allow lists, no longer exists.


Environment


  • Palo Alto Firewalls
  • PANOS 9.0.x, 9.1.x and 10.0.x
  • URL Block List configuration.


Procedure


To configure exceptions to URL categories
  1. Create a custom URL category under GUI: Objects > Custom Objects > URL Category
  • Any URL Filtering overrides that you configured before upgrading to PAN-OS 9.0 are now converted to custom URL Categories. For more details on these changes, see Multi-Category URL Filtering 
  1. Custom URL object will show in URL Filtering (GUI: Object  > Security Profiles > URL Filtering)
  • As default, URL category objects will have NONE as Action in URL Filtering
  1. Change action from NONE to BLOCK or ALLOW as needed 
  • If you had URL Filtering overrides configured before upgrading to PAN-OS 9.0, there are three issues you might see after the upgrade. Each has a workaround that you might consider implementing
  • See workarounds in Upgrade/Downgrade Considerations for PANOS 9.0.x
  1. Commit the changes
  2. When the URL category is used in security profile that belongs to a security policy, the traffic that matches url will be denied or permitted based on the configuration



Additional Information


Overrides tab in URL filtering missing after the upgrade.

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HCtYCAW&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language