Why a URL site access is BLOCKED When Explicitly Configured to ALLOW using Custom URL Objects?

Why a URL site access is BLOCKED When Explicitly Configured to ALLOW using Custom URL Objects?

3621
Created On 01/25/23 14:42 PM - Last Modified 10/09/24 21:48 PM


Question


Why a URL site access is BLOCKED When Explicitly Configured to ALLOW using Custom URL Objects?

Environment


  • URL Filtering Profile
  • Custom URL Category Object
  • URL category configured in Security Policy

Answer


  1. When the URL matches multiple categories, the match is made by taking the most stringent action.
  2. This information can be explained with an example.
  3. Lets say a new URL "abc.xyz.co" matches multiple categories.
    • Health and Medicine and 
    • Newly Registered Domains (NRD)
  4. Here the firewall  evaluates the applied security profiles to a security rule, for example, URL Filtering profile.
  5. The firewall takes the most severe actions as shown here.
  6. This happens even though one has explicitly configured to allow an URL using Custom Object.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sadRCAQ&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language