Custom URL Categories
You can create a custom URL Filtering object to specify exceptions to URL category enforcement, and to create a custom URL category based on multiple URL categories:
- Define exceptions to URL category enforcement—Create a custom list of URLs that you want to use as match criteria in a security policy rule. This is a good way to specify exceptions to URL categories, where you’d like to enforce specific URLs differently than the URL category to which they belong.
- Define a custom URL category based on multiple PAN-DB categories—This allows you to target enforcement for websites that match a set of categories. The website or page must match all the categories defined as part of the custom category.
Follow these steps to create a custom URL category, and define how you’d like the firewall to enforce the custom URL category:
- Select ObjectsCustom ObjectsURL Category.
- Add or modify a custom URL Category, and give the category a descriptive Name.
- Set the category Type to either Category
Match or URL List:
- URL List—Add URLs that you want to enforce differently than the URL category to which they belong. Use this list type to define exceptions for URL Category enforcement, or to define a list of URLs as belonging to a custom category. For details on how to populate this list, such as guidelines on how to use wildcards, see URL Category Exception Lists.
- Category Match—Provide targeted enforcement for websites that match a set of categories. The website or page must match all the categories defined as part of the custom category.
- Select OK to save the custom URL category.
- Select ObjectsSecurity ProfilesURL Filtering and Add or
modify a URL Filtering profile.Your new custom category will be listed under the Custom URL Categories drop down:
- Decide how you want to enforce Site Access and User Credential Submissions for the custom URL Category. (To control the sites to which users can submit their corporate credentials, see Prevent Credential Phishing).
- Attach the URL Filtering Profile to a security policy
rule, to enforce traffic that matches that rule. Select PoliciesSecurity Actions and specify for the security policy rule to enforce traffic based on the URL Filtering profile you just updated. Make sure to Commit your changes.You can also use custom URL categories as security policy match criteria. In this case, you do not need to define how the category should be enforced as part of a URL Filtering Profile. After setting up the custom category, go directly to the Security policy rule to which you want to add the custom URL category (PoliciesSecurity). Select Service/URL Category to use the custom URL category as match criteria for the rule. Learn more about using a URL Category as Policy Match Criteria.
URL Filtering Categories
URL Filtering Categories Select Objects Security Profiles URL Filtering Categories to control access to websites based on URL categories. Categories Settings Description Category Displays the ...
Multi-Category URL Filtering
PAN-DB classifies URLs with multiple categories, so that you can granularly control web access and how users interact with online content. ...
URL Filtering Overview
About URL Filtering Palo Alto Networks URL Filtering protects against web-based threats by giving you a way to safely enable web access while controlling how ...
URL Category as Policy Match Criteria
URL Category as Policy Match Criteria You can base policy enforcement on URL categories (both predefined and custom URL categories). For example, suppose you have ...
Objects > Custom Objects > URL Category
Objects > Custom Objects > URL Category Use the custom URL category page to create your custom list of URLs and use it in a ...
Create a Policy-Based Decryption Exclusion
Exclude traffic that you choose not to decrypt for legal, privacy, or business reasons from decryption to comply with those policies while still applying SSL ...
Block Search Results when Strict Safe Search is not Enabled
Block Search Results when Strict Safe Search is not Enabled By default, when you enable safe search enforcement, when a user attempts to perform a ...
External Dynamic List for URLs
External Dynamic List for URLs To protect your network from new sources of threat or malware, you can use External Dynamic Lists in URL Filtering ...
URL Categories PAN-DB classifies websites based on site content, features, and safety. A URL can have up to four categories, including risk categories (high, medium, ...