Skip to main content
All CollectionsGetting StartedStep 1: Whitelisting Right-Hand Domains & IPWhitelisting on cloud or on-premises spam filtering
How to create URL Category Exceptions for Allowlisting in Paloalto Networks PAN-OS/ Firewalls?
How to create URL Category Exceptions for Allowlisting in Paloalto Networks PAN-OS/ Firewalls?
K
Written by Karthek S
Updated over a week ago

Table of contents

If you are utilizing a URL filter such as Paloalto Networks PAN-OS, you will need to set up "URL Category Exceptions" to permit your recipients to access Right-Hand's link/landing page URLs.

This process is swift and straightforward, ensuring uninterrupted access to our landing page domains.

Note: This article is based on Paloalto Networks' official documentation on Custom URL Category Exceptions. Since each installation can vary significantly, we recommend contacting your support representative at Paloalto if you encounter any issues with this guide.

Setting Up URL Category Exceptions

Paloalto Networks' category exceptions can be set up in two ways: by IP address or by individual URL. We suggest using IP addresses for simpler management. In either case, the most straightforward method is to create a Custom URL Category for Right-Hand and allow it through your active filtering policies.

In PAN-OS, follow these steps to create a new custom URL category:

  1. Navigate to Objects > Custom Objects > URL Category.

  2. Click Add to create a new custom URL category.

  3. Enter a descriptive Name. We suggest "Right Hand IP Addresses" or "Right Hand Link URLs," but you can choose any name you prefer.

  4. Set the Type to URL List.

  5. Click Add.

  6. Add each of Right Hand's IP addresses individually (a complete list is available here), clicking Add after each entry.

    • Alternatively, you can include each of our link/landing page URLs in this custom category. You can find the full list of URLs on the platform, and our knowledge base guide explains how to access the live list.

  7. Click OK to save the new Custom URL Category.

Once this is completed, you can:

Add the new Custom URL Category to a new URL Filtering Profile, or modify an existing one.

  1. Navigate to Objects > Security Profiles > URL Filtering and click Add.

  2. Enter a descriptive Name for the profile.

  3. Click the dropdown menu labeled "Custom URL Categories" to find your newly created Custom URL Category. Make sure to set both Site Access and User Credential Submission to allow.

Now, proceed to the final step:

Apply the newly created or updated URL Filtering Profile to your Security Policy or Policies.

  1. Go to Policies > Security and select the policy where you want to apply your new URL Filtering Profile. Click Actions.

  2. In the Profile Setting section, set the Profile Type to Profiles.

  3. Then, use the dropdown menu next to URL Filtering to choose your newly created URL Filtering Profile.

  4. Click OK to apply the changes.

  5. Don’t forget to click Commit to activate your new URL Exceptions!

Important note: As stated at the beginning of this article, Paloalto installations and configurations can vary widely. If your setup doesn’t align with the instructions given and you need further assistance with adding URL Category exceptions, please get in touch with your Paloalto representative.

Did this answer your question?