This article explains whether URL path blocking is supported using Web Filtering on Juniper SRX firewalls and describes the recommended alternatives when granular URL path control is required.

When user wants to block access to a specific URL path, for example:

https://www.example.com/admin
https://www.example.com/downloads/file.zip
https://www.example.com/private/

while allowing access to the rest of the website (for example, https://www.example.com).

Web Filtering on SRX does not inspect or match the URL path portion of an HTTP or HTTPS request. Web Filtering performs URL categorization and policy enforcement based on the hostname (FQDN/domain) of the requested website.

Since all of the above requests share the same hostname, Web Filtering treats them identically and cannot apply different actions based on the URL path.

Blocking a specific URL path is not supported using Web Filtering alone.