Alto MS Series User Manual download pdf (Page 68)

64 Getting Started Guide

Control Access to Web Content Protect Your Network Against Threats

Step 4 Define how to control access to web

content.

If you are not sure what traffic you want

to control, consider setting the categories

(except for those blocked by default) to

alert. You can then use the visibility tools

on the firewall, such as the ACC and App

Scope, to determine which web categories

to restrict to specific groups or to block

entirely. You can then go back and modify

the profile to block and allow categories

as desired.

You can also define specific sites to always

allow or always block regardless of

category and enable the safe search

option to filter search results when

defining the URL filtering profile.

For more details, refer to “URL Filtering”

in the PAN-OS Administrator’s Guide.

1. For each category that you want visibility into or control over,

select a value from the

Action column as follows:

• If you do not care about traffic to a particular category (that

is you neither want to block it nor log it), select

Allow.

• For visibility into traffic to sites in a category, select

Alert

• To prevent access to traffic that matches the associated

policy, select

Block (this also generates a log entry).

2. Click

OK to save the URL filtering profile.

Step 5 Attach the URL filtering profile to a

security policy.

1. Select

Policies > Security.

2. Select the desired policy to modify it and then click the

Actions

tab.

3. If this is the first time you are defining a security profile, select

Profiles from the Profile Type drop-down.

4. In the

Profile Settings list, select the profile you just created

from the

URL Filtering drop-down. (If you don’t see

drop-downs for selecting profiles, select

Profiles from the

Profile Type drop-down.)

5. Click

OK to save the profile.

Commit the configuration.

Step 6 Enable Response Pages in the

management profile for each interface on

which you are filtering web traffic.

1. Select

Network > Network Profiles > Interface Mgmt and then

select an interface profile to edit or click

Add to create a new

profile.

2. Select

Response Pages, as well as any other management

services required on the interface.

3. Click

OK to save the interface management profile.

4. Select

Network > Interfaces and select the interface to which to

attach the profile.

5. On the

Advanced > Other Info tab, select the interface

management profile you just created.

6. Click

OK to save the interface settings.

Configure URL Filtering (Continued)

1 2 ... 63 64 65 66 67 68 69 70 71 72 73 ... 107 108

Comments to this Manuals

No comments

Alto MS Series User Manual Page 68

Comments to this Manuals