Sometimes you may come across a URL that you believe is categorized incorrectly. Use the following workflow to determine the URL categorization for a site and request a category change, if appropriate.
- Verify the category in the dataplane by running
the following command:
show running url <URL>For example, to view the category for the Palo Alto Networks website, run the following command:
show running url paloaltonetworks.comIf the URL stored in the dataplane cache has the correct category (computer-and-internet-info in this example), then the categorization is correct and no further action is required. If the category is not correct, continue to the next step.
- Verify if the category in the management plane by running
test url-info-host <URL>For example:
test url-info-host paloaltonetworks.comIf the URL stored in the management plane cache has the correct category, remove the URL from the dataplane cache by running the following command:
clear url-cache url <URL>The next time the firewall requests the category for this URL, the request will be forwarded to the management plane. This will resolve the issue and no further action is required. If this does not solve the issue, go to the next step to check the URL category on the cloud systems.
- Verify the category in the cloud by running the following
test url-info-cloud <URL>
- If the URL stored in the cloud has the correct category,
remove the URL from the dataplane and the management plane caches.Run the following command to delete a URL from the dataplane cache:
clear url-cache url <URL>Run the following command to delete a URL from the management plane cache:
delete url-database url <URL>The next time the firewall queries for the category of the given URL, the request will be forwarded to the management plane and then to the cloud. This should resolve the category lookup issue. If problems persist, see the next step to submit a categorization change request.
- To submit a change request from the web interface, go to the URL log and select the log entry for the URL you would like to have changed.
- Click the Request Categorization change
link and follow instructions. You can also request a category change
from the Palo Alto Networks Test A Site website by
searching for the URL and then clicking the Request Change icon.
To view a list of all available categories with descriptions of
each category, refer to https://urlfiltering.paloaltonetworks.com/CategoryList.aspx.If your change request is approved, you will receive an email notification. You then have two options to ensure that the URL category is updated on the firewall:
- Wait until the URL in the cache expires and the next time the URL is accessed by a user, the new categorization update will be put in the cache.
- Run the following command to force an update in the cache:
request url-filtering update url <URL>
About PAN-DB PAN-DB—the URL Filtering cloud database—classifies websites based on site content, features, and safety. A URL can have up to four URL Categories , ...
M-500 Appliance for PAN-DB Private Cloud
M-500 Appliance for PAN-DB Private Cloud To deploy a PAN-DB private cloud, you need one or more M-500 appliances. The M-500 appliance ships in Panorama ...
URLs Classified as Not-Resolved
URLs Classified as Not-Resolved Use the following workflow to troubleshoot why some or all of the URLs being identified by PAN-DB are classified as Not-resolved: ...
URL Categories PAN-DB classifies websites based on site content, features, and safety. A URL can have up to four categories, including risk categories (high, medium, ...
URL Database Out of Date
URL Database Out of Date If you have observed through the syslog or the CLI that PAN-DB is out-of-date, it means that the connection from ...
Multi-Category URL Filtering
PAN-DB classifies URLs with multiple categories, so that you can granularly control web access and how users interact with online content. ...
URL Filtering Categories
URL Filtering Categories Select Objects Security Profiles URL Filtering Categories to control access to websites based on URL categories. Categories Settings Description Category Displays the ...
Monitor Web Activity of Network Users
Monitor Web Activity of Network Users You can use the ACC, URL filtering reports, and logs that are generated on the firewall to track user ...
Components of a Security Policy Rule
Components of a Security Policy Rule The Security policy rule construct permits a combination of the required and optional fields as detailed in the following ...