Saturday, January 10, 2015

How To Create Custom URL Categories

Overview
This document describes the steps to create a Custom URL Category list, use the list in a URL Filtering profile, and then applying the profile in a security policy.
 

Steps

  1. For PAN-OS 4.0, 4.1, 5.0, go to Objects > Custom URL Category and click Add

  2. Untitled.jpg
    For PAN OS 6.0, 'Custom URL Category' has been renamed as 'URL Category' and moved under Objects > Custom Objects:
    Screen Shot 2014-05-26 at 9.55.04 AM.png
  3. Fill in the Name, Description, and the URLs of the category members (one per line).
    Note: A list of URLs can also be imported from a file.
To apply the the custom category to a URL filtering profile:
  1. Go to Objects > Security Profiles > URL Filtering and click Add.
  2. Name the profile and select the custom category.
    Note: The newly created category appears in the Category list with an asterisk next to it.
    Untitled.jpg
  3. Optionally, add URLs to the Allow/Block lists as appropriate.
 
To apply the URL filtering profile in a security policy:
  1. Go to Policies > Security
  2. Select or create a security policy
  3. Select the custom profile for URL Filtering, under Profile Setting:
    filter.jpg
  4. Commit
 
The Palo Alto Networks firewall will process the filter as follows:
  • Block list
  • Allow list
  • Custom category
  • Pre-defined category

No comments:

Post a Comment