Why does SSH traffic not match a security or decryption policy with a URL category
309
Created On 06/19/25 03:35 AM - Last Modified 10/13/25 15:43 PM
Question
Why does SSH traffic not match a security or decryption policy with a URL category
Environment
- Palo Alto Networks Firewalls
- Supported PAN-OS
- URL category in security or decryption policy rule
- SSH traffic
Answer
- When using TLS or HTTP a URL is referenced in the relevant traffic.
- The URL information is found in the client hello or server certificate for TLS, and the GET for HTTP.
- With SSH there is no reference to the URL and therefore it has no means to match to a URL or URL category.