Advanced URL Filtering


Table of Contents


    • Ensure that the list does not include IP addresses or domain names; the firewall skips non-URL entries.
    • Use the custom URL list guidelines to verify the list’s formatting.
    • Select
      URL List
      from the Type drop-down.
  1. Use the external dynamic list in a URL Filtering profile.
    1. Select
      Security Profiles
      URL Filtering
    2. Add
      or modify an existing URL Filtering profile.
    3. Name
      the profile and, in the
      tab, select the external dynamic list from the Category list.
    4. Click Action to select a more granular action for the URLs in the external dynamic list.
      If a URL that is included in an external dynamic list is also included in a custom URL category, or block and allow list, the action specified in the custom category takes precedence over the external dynamic list.
    5. Click
    6. Attach the URL Filtering profile to a Security policy rule.
      1. Select
      2. Select the
        tab and, in the Profile Setting section, select the new profile in the
        URL Filtering
      3. Click
        your changes.
  2. Test that the policy action is enforced.
    1. View the external dynamic list entries and try to access a URL from the list.
    2. Verify that the action you defined is enforced in the browser.
    3. To monitor the activity on the firewall:
      1. Select
        and add a URL Domain as a global filter to view the Network Activity and Blocked Activity for the URL you accessed.
      2. Select
        URL Filtering
        to access the detailed log view.
  3. Verify whether entries in the external dynamic list were ignored or skipped.
    In a list of type URL, the firewall skips non-URL entries as invalid and ignores entries that exceed the maximum limit for the firewall model.
    To check whether you have reached the limit for an external dynamic list type, select
    External Dynamic Lists
    and click
    List Capacities
    Use the following CLI command on a firewall to review the details for a list.
    request system external-list show type url name
    For example:
    request system external-list show type url name My_URL_List
    vsys5/My_URL_List: Next update at: Tue Jan 3 14:00:00 2017 Source: Referenced: Yes Valid: Yes Auth-Valid: Yes Total valid entries: 3 Total invalid entries: 0 Valid urls:

Recommended For You