Environment
- Any PAN-OS.
- Palo Alto Firewall.
- URL Filtering.
Resolution
Many of you are wondering, “How do I test to see if our URL Filtering service is enforcing my organization’s policies for malicious and benign URLs properly?” For benign categories, this is relatively straightforward, you simply visit the website and see if the designed policy is being logged and enforced.
This works fine for harmless categories, such as web-mail, sports, shopping, etc. It does get a bit tricky for gray area categories, such as adult as you generally don’t want to visit an adult site at work. You obviously don’t want to actually visit a malicious URL either.
We have test URLs for all categories for you to visit. These testing URLs are 100% benign, and have been categorized to their respective categories for testing purposes.
For example, you can visit a test URL for command-and-control. If you visit: http://urlfiltering.paloaltonetworks.com/test-command-and-control and if your policy is configured to block-continue access to command-and-control categorized URLs, you will see a blocked-continue page.
For a non-malicious category such as social-networking, you can visit: https://urlfiltering.paloaltonetworks.com/test-social-networking and if your policy is to allow access to this category, you will see the following result.
Keep in mind, this information will be logged as well, so you can query your logs.
Here is a list of test pages for low, medium and high risk categories:
http://urlfiltering.paloaltonetworks.com/test-low-risk
http://urlfiltering.paloaltonetworks.com/test-medium-risk
http://urlfiltering.paloaltonetworks.com/test-high-risk
Here is a list of test pages for malicious categories:
http://urlfiltering.paloaltonetworks.com/test-malware
http://urlfiltering.paloaltonetworks.com/test-phishing
http://urlfiltering.paloaltonetworks.com/test-command-and-control
Here is a list of test pages for newly registered domains:
https://urlfiltering.paloaltonetworks.com/test-newly-registered-domains
Here is a list of test pages non-malicious categories:
http://urlfiltering.paloaltonetworks.com/test-abortion
http://urlfiltering.paloaltonetworks.com/test-abused-drugs
http://urlfiltering.paloaltonetworks.com/test-adult
http://urlfiltering.paloaltonetworks.com/test-alcohol-and-tobacco
http://urlfiltering.paloaltonetworks.com/test-auctions
http://urlfiltering.paloaltonetworks.com/test-business-and-economy
http://urlfiltering.paloaltonetworks.com/test-computer-and-internet-info
http://urlfiltering.paloaltonetworks.com/test-content-delivery-networks
http://urlfiltering.paloaltonetworks.com/test-copyright-infringement
http://urlfiltering.paloaltonetworks.com/test-dating
http://urlfiltering.paloaltonetworks.com/test-dynamic-dns
http://urlfiltering.paloaltonetworks.com/test-educational-institutions
http://urlfiltering.paloaltonetworks.com/test-entertainment-and-arts
http://urlfiltering.paloaltonetworks.com/test-extremism
http://urlfiltering.paloaltonetworks.com/test-financial-services
http://urlfiltering.paloaltonetworks.com/test-gambling
http://urlfiltering.paloaltonetworks.com/test-games
http://urlfiltering.paloaltonetworks.com/test-government
http://urlfiltering.paloaltonetworks.com/test-hacking
http://urlfiltering.paloaltonetworks.com/test-health-and-medicine
http://urlfiltering.paloaltonetworks.com/test-home-and-garden
http://urlfiltering.paloaltonetworks.com/test-hunting-and-fishing
http://urlfiltering.paloaltonetworks.com/test-insufficient-content
http://urlfiltering.paloaltonetworks.com/test-internet-communications-and-telephony
http://urlfiltering.paloaltonetworks.com/test-internet-portals
http://urlfiltering.paloaltonetworks.com/test-job-search
http://urlfiltering.paloaltonetworks.com/test-legal
http://urlfiltering.paloaltonetworks.com/test-military
http://urlfiltering.paloaltonetworks.com/test-motor-vehicles
http://urlfiltering.paloaltonetworks.com/test-music
http://urlfiltering.paloaltonetworks.com/test-news
http://urlfiltering.paloaltonetworks.com/test-nudity
http://urlfiltering.paloaltonetworks.com/test-online-storage-and-backup
http://urlfiltering.paloaltonetworks.com/test-parked
http://urlfiltering.paloaltonetworks.com/test-peer-to-peer
http://urlfiltering.paloaltonetworks.com/test-personal-sites-and-blogs
http://urlfiltering.paloaltonetworks.com/test-philosophy-and-political-advocacy
http://urlfiltering.paloaltonetworks.com/test-private-ip-addresses
http://urlfiltering.paloaltonetworks.com/test-proxy-avoidance-and-anonymizers
http://urlfiltering.paloaltonetworks.com/test-questionable
http://urlfiltering.paloaltonetworks.com/test-real-estate
http://urlfiltering.paloaltonetworks.com/test-recreation-and-hobbies
http://urlfiltering.paloaltonetworks.com/test-reference-and-research
http://urlfiltering.paloaltonetworks.com/test-religion
http://urlfiltering.paloaltonetworks.com/test-search-engines
http://urlfiltering.paloaltonetworks.com/test-sex-education
http://urlfiltering.paloaltonetworks.com/test-shareware-and-freeware
http://urlfiltering.paloaltonetworks.com/test-shopping
http://urlfiltering.paloaltonetworks.com/test-social-networking
http://urlfiltering.paloaltonetworks.com/test-society
http://urlfiltering.paloaltonetworks.com/test-sports
http://urlfiltering.paloaltonetworks.com/test-stock-advice-and-tools
http://urlfiltering.paloaltonetworks.com/test-streaming-media
http://urlfiltering.paloaltonetworks.com/test-swimsuits-and-intimate-apparel
http://urlfiltering.paloaltonetworks.com/test-training-and-tools
http://urlfiltering.paloaltonetworks.com/test-translation
http://urlfiltering.paloaltonetworks.com/test-travel
http://urlfiltering.paloaltonetworks.com/test-unknown
http://urlfiltering.paloaltonetworks.com/test-weapons
http://urlfiltering.paloaltonetworks.com/test-web-advertisements
http://urlfiltering.paloaltonetworks.com/test-web-hosting
http://urlfiltering.paloaltonetworks.com/test-web-based-email
http://urlfiltering.paloaltonetworks.com/test-cryptocurrency
http://urlfiltering.paloaltonetworks.com/test-grayware
Here is a list of test malicious categories for Advanced URL Filtering:
http://urlfiltering.paloaltonetworks.com/test-real-time-detection-command-and-control
http://urlfiltering.paloaltonetworks.com/test-real-time-detection-malware
http://urlfiltering.paloaltonetworks.com/test-real-time-detection-phishing
http://urlfiltering.paloaltonetworks.com/test-real-time-detection-grayware
Additional Information
Note: All the above links also work with HTTPS connections. Replace http:// with https://.
Ref: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaDCAS