Legacy URL filtering licenses are discontinued, but
active legacy licenses are still supported.
Prisma Access licenses include Advanced URL Filtering capabilities.
You can exclude specific websites from URL category enforcement,
ensuring that these websites are blocked or allowed regardless of
the policy action associated with its URL categories. For example,
you might block the social-networking URL category but allow access
to LinkedIn. To create exceptions to URL category policy enforcement:
Add the IP addresses or URLs of sites you want to block
or allow to a custom URL category of URL
List type. Then, define site access for the category
in a URL Filtering profile. Finally, attach the profile to a Security
policy rule.
You can also use a custom URL category as
match criteria in a Security policy rule. Be sure to place the exception
rule above any rules that block or allow the categories to which
the URL exceptions belong.
External dynamic lists of URL List type
should not be confused with external dynamic lists of Domain
List or IP Address List type.
While external dynamic lists of URLs permit domains and IP addresses,
the reverse is not true and result in invalid entries.