topic Re: Allow specific URL from blocked category - R81.10 in Firewall and Security Management

Allow specific URL from blocked category - R81.10

Hasnain_Ansari — Wed, 07 Sep 2022 15:22:25 GMT

Hi everyone,
I am facing an issue that i have blocked News / Media category but i want to allow a specific website/URL which is being blocked due to this category News / Media.
Is there any way to allow the specific (www.example.com) website/URL ?

Re: Allow specific URL from blocked category - R81.10

RS_Daniel — Wed, 07 Sep 2022 16:10:15 GMT

Hello,

Create a custom application object and add the following URL's:

example.com
www.example.com

You can check sk165094 for detailed information.

Regards

Re: Allow specific URL from blocked category - R81.10

the_rock — Wed, 07 Sep 2022 17:12:30 GMT

Agree with @RS_Daniel . Just create say custom app object OR domain object and place allow rule above that blocks it, thats it.

Andy

Re: Allow specific URL from blocked category - R81.10

Hasnain_Ansari — Thu, 08 Sep 2022 09:06:22 GMT

Hi RS_Daniel,
We tried but still we are getting reject log in smart Console and seems like the rule we created is not being hit, URL is getting blocked from the below blocked category rule. (Rule 1 - We allowed URL , Rule 2 - Category is blocked int the rule. )

zdebug show some messages like :
dropped by fwmultik_process_f2p_cookie_inner Reason: PSL Drop: TLS_PARSER
up_fw_print_rb_exe_drop_info: on layer 'CP-GW': MATCH on rule 2 action Reject

1_01]@;3929553837;[vs_0];[tid_24];[fw4_24];up_fw_print_rb_exe_drop_info: on layer 'CP-GW': MATCH on rule 2 action Reject <dir 0, 10.1.1.1:57524 -> 162.159.X.Y:443 IPP 6>;

[1_01]@;3929553840;[vs_0];[tid_24];[fw4_24];fw_log_drop_ex: Packet proto=6 162.159.X.Y:443 -> 10.1.1.1:57524 dropped by fwmultik_process_f2p_cookie_inner Reason: PSL Drop: TLS_PARSER

[1_01]@;3929553843;[vs_0];[tid_24];[fw4_24];fw_log_drop_ex: Packet proto=6 162.159.X.Y:443 -> 10.1.1.1:57524 dropped by fwmultik_process_f2p_cookie_inner Reason: PSL Drop: TLS_PARSER

[1_01]@;3929554058;[vs_0];[tid_24];[fw4_24];up_fw_print_rb_exe_drop_info: on layer 'CP_GW': MATCH on rule 2 action Reject <dir 0, 10.1.1.1:57525 -> 162.159.X.Y:443 IPP 6>;

We have created Rule 1 to allow the URL but seems like it's not getting hit.

Any help ?