Advanced URL Filtering
Create a Custom URL Category (Strata Cloud Manager)
Table of Contents
Create a Custom URL Category (Strata Cloud Manager)
If you’re using Panorama to manage Prisma Access:
Toggle over to the PAN-OS & Panorama tab and follow the guidance
there.
If you’re using Strata Cloud Manager, continue here.
- Select ManageConfigurationSecurity ServicesURL Access ManagementAccess Control.Under Custom URL Categories, select Add Category.Enter a descriptive Name for the category.Set the custom URL category Type to either URL List or Category Match.
- URL List—Use this list type to add URLs that you want to enforce differently than the URL category to which they belong or to define a list of URLs as belonging to a custom category. Consult the Guidelines for URL Category Exceptions as you create URL list entries.
- Category Match—Provide targeted enforcement for websites that match a set of categories. The website or page must match all the categories defined in the custom category.
Under Items, Add either URLs or existing categories.Save the custom URL category.Define Site Access and User Credential Submissions settings for the custom URL category.- Select ManageConfigurationSecurity ServicesURL Access ManagementURL Access Management Profiles.Select an existing profile to modify or click Add Profile.Under Access Control, select the custom URL category you created earlier. It sits under Custom URL Categories and above Pre-Defined Categories.Set Site Access for the category.Set User Credential Submissions for the category.Save the profile.Apply the URL Access Management profile to a Security policy rule.A URL Access Management profile is only active when it’s included in a profile group that a Security policy rule references.Follow the steps to activate a URL Access Management profile (and any Security profile). Be sure to Push Config.You can also use custom URL categories as Security policy rule match criterion. In this scenario, you do not define site access for the URL category in a URL Filtering profile. Instead, after creating a custom URL category, select the Security policy rule you want to add the custom URL category to (ManageConfiguration Security ServicesSecurity Policy). Under Applications, Services and URLs and URL Category Entities, click Add URL Categories. Select the custom URL category you created, and then Save the Security policy rule.