Create a Custom URL Category

You can create a custom URL Filtering object to specify exceptions to URL category enforcement, and to create a custom URL category based on multiple URL categories:
  • Define exceptions to URL category enforcement
    —Create a custom list of URLs that you want to use as match criteria in a security policy rule. This is a good way to specify exceptions to URL categories, where you’d like to enforce specific URLs differently than the URL category to which they belong.
  • Define a custom URL category based on multiple PAN-DB categories
    —This allows you to target enforcement for websites that match a set of categories. The website or page must match
    all
    the categories defined as part of the custom category.
Follow these steps to create a custom URL category, and define how you’d like the firewall to enforce the custom URL category:
  1. Select
    Objects
    Custom Objects
    URL Category
    .
  2. Add
    or modify a custom URL Category, and give the category a descriptive
    Name
    .
  3. Set the category
    Type
    to either
    Category Match
    or
    URL List
    :
    • URL List
      —Add URLs that you want to enforce differently than the URL category to which they belong. Use this list type to define exceptions for URL Category enforcement, or to define a list of URLs as belonging to a custom category. For details on how to populate this list, such as guidelines on how to use wildcards, see URL Category Exceptions.
    • Category Match
      —Provide targeted enforcement for websites that match a set of categories. The website or page must match
      all
      the categories defined as part of the custom category.
  4. Select
    OK
    to save the custom URL category.
  5. Select
    Objects
    Security Profiles
    URL Filtering
    and
    Add
    or modify a URL Filtering profile.
    Your new custom category will be listed under the
    Custom URL Categories
    drop down:
    profile-categories-custom-EDLs-predefined.png
  6. Decide how you want to enforce
    Site Access
    and
    User Credential Submissions
    for the custom URL Category. (To control the sites to which users can submit their corporate credentials, see Prevent Credential Phishing).
  7. Attach the URL Filtering Profile to a security policy rule, to enforce traffic that matches that rule.
    Select
    Policies
    Security
    Actions
    and specify for the security policy rule to enforce traffic based on the URL Filtering profile you just updated. Make sure to
    Commit
    your changes.
    You can also use custom URL categories as security policy match criteria. In this case, you do not need to define how the category should be enforced as part of a URL Filtering Profile. After setting up the custom category, go directly to the Security policy rule to which you want to add the custom URL category (
    Policies
    Security
    ). Select
    Service/URL Category
    to use the custom URL category as match criteria for the rule.

Related Documentation