URL Filtering Use Cases
The following use cases show how to use App-ID to control
a specific set of web-based applications and how to use URL categories
as match criteria in a policy. When working with App-ID, it is important
to understand that each App-ID signature may have dependencies that
are required to fully control an application. For example, with
Facebook applications, the App‑ID facebook‑base is required to access
the Facebook website and to control other Facebook applications.
For example, to configure the firewall to control Facebook email,
you would have to allow the App-IDs facebook-base and facebook-mail.
As another example, if you search Applipedia (the App-ID
database) for LinkedIn, you will see that in order to control LinkedIn
mail, you need to apply the same action to both App-IDs: linkedin-base
and linkedin-mail. To determine application dependencies for App-ID
signatures, visit Applipedia, search for
the given application, and then click the application for details.
These use cases rely on User-ID to
implement policies based on users and groups and a Decryption to
identify and control websites that are encrypted using SSL/TLS.
Related Documentation
Interaction Between App-ID and URL Categories
Interaction Between App-ID and URL Categories The Palo Alto Networks URL filtering solution in combination with App-ID provides unprecedented protection against a full spectrum of ...
Use Case: Use URL Categories for Policy Matching
Use Case: Use URL Categories for Policy Matching You can also use URL categories as match criteria in the following policy types: Authentication, Decryption, Security, ...
Use Case: Control Web Access
Use Case: Control Web Access When using URL filtering to control user website access, there may be instances where granular control is required for a ...
URL Category as Policy Match Criteria
URL Category as Policy Match Criteria Use URL Categories as a match criteria in a policy rule for more granular enforcement. For example, suppose you ...
Create a Decryption Policy Rule
Decryption policy rules granularly define the traffic to decrypt or not to decrypt based on the source, destination, service (application port), and URL Category. ...
Decryption Overview
Decryption Overview The Secure Sockets Layer (SSL) and Secure Shell (SSH) encryption protocols secure traffic between two entities, such as a web server and a ...
Block Search Results when Strict Safe Search is not Enabled
Block Search Results when Strict Safe Search is not Enabled By default, when you enable safe search enforcement, when a user attempts to perform a ...
Disable and Enable App-IDs
Disable and Enable App-IDs You can disable all App-IDs introduced in a content release if you want to immediately benefit from the latest threat prevention, ...