Sometimes you may come across a URL that you believe is categorized incorrectly. Use the following workflow to determine the URL categorization for a site and request a category change, if appropriate.
- Verify the category in the dataplane by running
the following command:
show running url <URL>For example, to view the category for the Palo Alto Networks website, run the following command:
show running url paloaltonetworks.comIf the URL stored in the dataplane cache has the correct category (computer-and-internet-info in this example), then the categorization is correct and no further action is required. If the category is not correct, continue to the next step.
- Verify if the category in the management plane by running
test url-info-host <URL>For example:
test url-info-host paloaltonetworks.comIf the URL stored in the management plane cache has the correct category, remove the URL from the dataplane cache by running the following command:
clear url-cache url <URL>The next time the firewall requests the category for this URL, the request will be forwarded to the management plane. This will resolve the issue and no further action is required. If this does not solve the issue, go to the next step to check the URL category on the cloud systems.
- Verify the category in the cloud by running the following
test url-info-cloud <URL>
- If the URL stored in the cloud has the correct category,
remove the URL from the dataplane and the management plane caches.Run the following command to delete a URL from the dataplane cache:
clear url-cache url <URL>Run the following command to delete a URL from the management plane cache:
delete url-database url <URL>The next time the firewall queries for the category of the given URL, the request will be forwarded to the management plane and then to the cloud. This should resolve the category lookup issue. If problems persist, see the next step to submit a categorization change request.
- To submit a change request from the web interface, go to the URL log and select the log entry for the URL you would like to have changed.
- Click the Request Categorization change
link and follow instructions. You can also request a category change
from the Palo Alto Networks Test A Site website by
searching for the URL and then clicking the Request Change icon.
To view a list of all available categories with descriptions of
each category, refer to https://urlfiltering.paloaltonetworks.com/CategoryList.aspx.If your change request is approved, you will receive an email notification. You then have two options to ensure that the URL category is updated on the firewall:
- Wait until the URL in the cache expires and the next time the URL is accessed by a user, the new categorization update will be put in the cache.
- Run the following command to force an update in the cache:
request url-filtering update url <URL>
PAN-DB Categorization When a user requests a URL the firewall determines the URL category by comparing the URL with the following components (in order) until ...
URL Categories Each website defined in the URL filtering database is assigned a URL category. Here are a few ways to leverage URL categories: Block ...
M-500 Appliance for PAN-DB Private Cloud
M-500 Appliance for PAN-DB Private Cloud To deploy a PAN-DB private cloud, you need one or more M-500 appliances. The M-500 appliance ships in Panorama ...
URLs Classified as Not-Resolved
URLs Classified as Not-Resolved Use the following workflow to troubleshoot why some or all of the URLs being identified by PAN-DB are classified as Not-resolved: ...
URL Database Out of Date
URL Database Out of Date If you have observed through the syslog or the CLI that PAN-DB is out-of-date, it means that the connection from ...
Five-Minute Updates for PAN-DB Malware and Phishing URL Categories
Five-Minute Updates for PAN-DB Malware and Phishing URL Categories The Malware and Phishing URL categories in the PAN-DB cloud are now updated every five minutes ...
URL Filtering Categories
URL Filtering Categories Objects > Security Profiles > URL Filtering > Categories The following table describes URL filtering category settings. Categories Settings Description Category In ...
Components of a Security Policy Rule
Components of a Security Policy Rule The Security policy rule construct permits a combination of the required and optional fields as detailed in the following ...
Control Access to Web Content
Control Access to Web Content URL Filtering provides visibility and control over web traffic on your network. With URL filtering enabled, the firewall can categorize ...