Unable to block an URL with action block in the URL Filtering Profile

• Unable to block a domain despite correct configuration in the Custom Category URL object and URL Filtering Profile.
• Other URLs are blocked with the applied URL filtering profile, indicating general functionality.
• Minimal traffic shows in monitor logs for the affected devices.
• No record of the URL being allowed or denied in the logs.

• Next Gen Firewalls (NGFW)
• Prisma Access Firewalls
• Supported PAN-OS

"Web Browser is using "quic" protocol for accessing URLs.

Identify the "quic" protcol being used by trying the following.

1. Run nslookup and get the destination IP addresses of the URL.
2. Filter these IP address in the traffic logs.
3. Verify if the traffic is matching the application quic.
4. Confirm if the security policy allows the quic/SSL to pass through.
5. Block this "quic" protocol/Application.
6. Now the Firewall will block using SSL application, and It will be shown in the URL Filtering Profile logs with the correct security rule

Note: SSL decryption needs to be enabled for the destination URL traffic to identify and block the "quic" protocol/app.