Custom URL Categories

You can create a custom URL Filtering object to specify exceptions to URL category enforcement, and to create a custom URL category based on multiple URL categories:
  • Define exceptions to URL category enforcement—Create a custom list of URLs that you want to use as match criteria in a security policy rule. This is a good way to specify exceptions to URL categories, where you’d like to enforce specific URLs differently than the URL category to which they belong.
  • Define a custom URL category based on multiple PAN-DB categories—This allows you to target enforcement for websites that match a set of categories. The website or page must match all the categories defined as part of the custom category.
Follow these steps to create a custom URL category, and define how you’d like the firewall to enforce the custom URL category:
  1. Select ObjectsCustom ObjectsURL Category.
  2. Add or modify a custom URL Category, and give the category a descriptive Name.
  3. Set the category Type to either Category Match or URL List:
    • URL List—Add URLs that you want to enforce differently than the URL category to which they belong. Use this list type to define exceptions for URL Category enforcement, or to define a list of URLs as belonging to a custom category. For details on how to populate this list, such as guidelines on how to use wildcards, see URL Category Exception Lists.
    • Category Match—Provide targeted enforcement for websites that match a set of categories. The website or page must match all the categories defined as part of the custom category.
  4. Select OK to save the custom URL category.
  5. Select ObjectsSecurity ProfilesURL Filtering and Add or modify a URL Filtering profile.
    Your new custom category will be listed under the Custom URL Categories drop down:
    profile-categories-custom-EDLs-predefined.png
  6. Decide how you want to enforce Site Access and User Credential Submissions for the custom URL Category. (To control the sites to which users can submit their corporate credentials, see Prevent Credential Phishing).
  7. Attach the URL Filtering Profile to a security policy rule, to enforce traffic that matches that rule.
    Select PoliciesSecurity Actions and specify for the security policy rule to enforce traffic based on the URL Filtering profile you just updated. Make sure to Commit your changes.
    You can also use custom URL categories as security policy match criteria. In this case, you do not need to define how the category should be enforced as part of a URL Filtering Profile. After setting up the custom category, go directly to the Security policy rule to which you want to add the custom URL category (PoliciesSecurity). Select Service/URL Category to use the custom URL category as match criteria for the rule. Learn more about using a URL Category as Policy Match Criteria.

Related Documentation