topic Re: URL filtering not working in Firewall and Security Management

URL filtering not working

Rahul_Borah — Fri, 25 Mar 2022 02:38:43 GMT

Hi Mates,

I have enabled URL/Application blade and allowed some URL but the same traffic are blocked in the firewall blade. Please guide, is there any rule is required at the firewall blade for allowing IP? I am sharing the URL filtering rule and logs. Please suggest.

Regards,

Re: URL filtering not working

Chris_Atkinson — Fri, 25 Mar 2022 03:12:20 GMT

Are you using layers in your policy & what Services & Applications are allowed?

Re: URL filtering not working

Rahul_Borah — Fri, 25 Mar 2022 03:23:07 GMT

Hi Chris,

There is no layer in the policy.

We are allowing outlook.com, outlook365.com, microsoft.com etc

Is access rule is required for allowing those IPs which are blocked at firewall blade ?

Re: URL filtering not working

SSlater — Fri, 25 Mar 2022 04:33:07 GMT

The APPI/URL Filtering will occur after the Network/Access Filtering unless you run both on the same policy.

If you have seperate policies, as we used in R77.x and below, this is expected.

You will need to allow it first through Access, then filter through APPI/URL Filtering as required. - This is the legacy approach, typically we not will use Policies that contain Access, and APPI/URL Filtering in one policy.

Re: URL filtering not working

Rahul_Borah — Fri, 25 Mar 2022 05:57:22 GMT

Hi Stephen,

We are using R81 and try to allow outlook.com, microsoft.com etc. For this access we have create two rule, one is in application/url filtering(Source is server IP and destination is URL(screenshot attached) and another one is in firewall blade (Source is server IP and destination is domain (screenshot attached) . Kindly guide, if any changes required, and please share SK, if available.

Is there any SSL inspection is required for https traffics ?