It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda NextGen Firewall X

This Product is End-of-Life and End-Of-Support

End-Of-Life and End-Of-Support on December 1st, 2020: All Barracuda Firewall X-Series sales will cease; neither new sales nor any renewals will be available. If you currently hold a maintenance and support contract, you will continue to receive our award-winning support and services until your contract expires. Please see the End-Of-Life definition as described in the End of Support and End of Life Information.

URL Policy Objects

  • Last updated on

As part of the Barracuda NextGen Firewall X-Series URL Filter, URL policy objects define access restrictions for URL categories and websites. URL policy objects can be applied to application policies and define the action to be performed by the X-Series Firewall when users try to access URLs. To use URL Filtering, you must have a Barracuda Web Security Subscription.

Create a URL Policy Object

Create a URL policy object to specify access restrictions for URL categories. You can also define exceptions to these categories by explicitly entering the URL of websites that you want to always allow or block.

  1. Go to FIREWALL > URL Objects.
  2. Click Add URL Policy. The Add URL Policy window opens.
  3. Enter a Name for the URL policy.
  4. Select the default action when the online URL categorization database is unavailable:
    • Allow All – Access to all URLs is allowed.
    • Block All – Access to all URLs is denied.
  5. Enter the timeout for Warn and continue override valid for 'n' minutes.
  6. In the Categories section, select the action to be performed when users try to access a URL category. You can define the following actions for each category:

    • Allow – Allow access to all URLs defined in the category.
    • Warn – Allow access to the URL category. Access is silently logged by the X-Series Firewall.
    • Alert – Allow access after accepting a warn and continue message. This action is logged by the X-Series Firewall.
    • Override – User request time limited access from a URL Filter override admin. If the request is accepted the user is allowed to access the URL. This action is logged by the X-Series Firewall.
    • Block – Block access to all URLs defined in the category.


  7. (optional) To define exceptions for specific URLs, click the URLs tab.

    • In the Always ALLOW field, enter whitelisted URLs and for each entry click plus (+).
    • In the Always BLOCK field, enter blacklisted URLs and for each entry click plus (+).
  8. Click Save.

The URL policy is displayed in the URL POLICY OBJECTS list and can now be used in your application policies. For more information, see Apply the URL policy object to an application policy.


Edit / Delete a URL Policy

To edit a URL policy, click the edit symbol next to the entry. In the Edit URL Policy window, edit the settings for the policy, and click Save.

To delete a URL policy, click the trash can icon next to the entry and click OK.