Configure URL Filtering (Cloud Management)

Configure URL Filtering (also called URL Access Management) on Prisma Access Cloud Management.
This feature requires the
URL Filtering
license for Prisma Access.
Here’s the basic workflow to configure URL Filtering on Prisma Access Cloud Management.
  1. Explore the URL Access Management Dashboard
    Go to
    Manage
    Configuration
    Security Services
    URL Access Management
    .
    Move between the
    Access Control
    ,
    Settings
    , and
    Best Practices
    tabs to explore all the URL Filtering features available to you.
  2. Review and Customize General URL Filtering Settings
    On the dashboard, go to the
    Settings
    tab to see the default URL Filtering settings that apply across your Prisma Access environment, including:
    Automatically append end tokens to URLs in an EDL or a custom URL category
    If you use URLs in custom URL categories or External Dynamic Lists (EDLs) and do not append an ending token, it is possible to allow more URLs than you intended. For example, entering example.com as a matching URL instead of example.com/ would also match example.com.website.info or example.com.br.Prisma Access can automatically set an ending token to URLs in EDLs or custom URL categories so that, if you enter example.com, Prisma Access treats it as it would treat example.com/ and only match that URL.
    Go to
    Settings
    General Settings
    and enable the option to
    Append End Token to Entries
    .
    You can customize these settings for each deployment type (mobile users, remote networks, or service connections).
  3. Create a URL Access Management Profile
    On the URL Access Management dashboard,
    Add Profile
    and continue to specify web access settings. Note that:
    • Best practice checks are built-in to the profile to give you a live evaluation of your configuration.
    • After you’ve finished enabling a profile, you can examine profile usage to see if any security policy rules are referencing the profile.
  4. Add the URL Access Management Profile to a Security Rule
    A URL Access Management profile is only active when it’s included in a profile group that a security policy rule is referencing.

Recommended For You