excellent videos, no annoying music or sounds just straight to it explaining the technology as well as zooming into the relevant parts. JUST BRILLIANT TEACHING. Thank you immensely
What about the policy's Service/URL Category? I noticed that I can use the EDL URL list. What is the difference between the Service/URL Category and Action Group in this video?
That's a very good question. By using the URL Filtering Security Profiles (Profile Settings in Action), you are more flexible on the way you want your traffic to be regulated. You have, for example, the option to block certain categories or URLs, as I showed in the video. The URL Category directly in the security policy only allows positive matches (the whole rule doesn't match if the user is trying to access URLs belonging to other categories, and the firewall keeps going down the rule list).
Hi. Sorry for the late reply. An URL without the forward slash in the end can match more than you want. for example, if you have a URL "example.com" without the slash in the end, it will also match "example.com.badserver.com". From the Palo Alto documentation: The trailing slash prevents the firewall from assuming an implicit asterisk to the right of the domain.
Hello its working for me, but not displaying the "web page blocking" i just have a time out, this create confusion to my users because they just think internet is not working. any clue ??
Yes, probably you need SSL decryption for the URL. Otherwise the Palo Alto cannot act as a man-in-the-middle and show a modified page (web page blocking). Take a look at this post: www.reddit.com/r/paloaltonetworks/comments/9buh0u/url_filtering_doesnt_display_blocked_message_on/
![Palo Alto - Temporarily Block Attackers [2024]](http://i.ytimg.com/vi/e35NtFwHFUg/mqdefault.jpg)
FREE Palo Alto Cheat Sheet in different formats and further FREE resources: netsums.com/resources
excellent videos, no annoying music or sounds just straight to it explaining the technology as well as zooming into the relevant parts. JUST BRILLIANT TEACHING. Thank you immensely
Thank you also for the lovely comment! I'm glad you like our videos.
Great video👍🏻😊
Thank you, glad you liked it!
What about the policy's Service/URL Category? I noticed that I can use the EDL URL list. What is the difference between the Service/URL Category and Action Group in this video?
That's a very good question. By using the URL Filtering Security Profiles (Profile Settings in Action), you are more flexible on the way you want your traffic to be regulated. You have, for example, the option to block certain categories or URLs, as I showed in the video.
The URL Category directly in the security policy only allows positive matches (the whole rule doesn't match if the user is trying to access URLs belonging to other categories, and the firewall keeps going down the rule list).
awesome
Hi, thank you for the comment, I'm glad you liked it.
I did a little confusion about this.
What's the difference about a site with or whitout forward slash at the end?
Hi. Sorry for the late reply. An URL without the forward slash in the end can match more than you want. for example, if you have a URL "example.com" without the slash in the end, it will also match "example.com.badserver.com".
From the Palo Alto documentation: The trailing slash prevents the firewall from assuming an implicit asterisk to the right of the domain.
@@netsums
No worries.
Thanks a lot!
👍👍👍🔥🔥
😃Como puedo buscar las categorías de multiples URLs?
Is it what you mean? urlfiltering.paloaltonetworks.com/
Hello its working for me, but not displaying the "web page blocking" i just have a time out, this create confusion to my users because they just think internet is not working.
any clue ??
Yes, probably you need SSL decryption for the URL. Otherwise the Palo Alto cannot act as a man-in-the-middle and show a modified page (web page blocking).
Take a look at this post: www.reddit.com/r/paloaltonetworks/comments/9buh0u/url_filtering_doesnt_display_blocked_message_on/