The PowerBall Lottery has reached a high payout amount and a company has decided to help employee morale by allowing employees to check the number, but doesn't want to unblock the gambling URL…

Adding all URLs from the gambling category except powerball.com to a block list is an impractical and unmanageable solution, as the gambling category contains numerous dynamic URLs that would be impossible to enumerate and maintain.

Palo Alto Networks pre-defined URL categories are cloud-managed and cannot be manually modified or have specific URLs removed by administrators on the firewall.

Adding `*.powerball.com` to an allow list creates an explicit exception that overrides the block policy for the broader gambling URL category, permitting access to the specific domain.

Creating a custom URL category for `*.powerball.com` and then configuring a security policy to allow this custom category provides a granular method to permit access to the specific site without impacting the main gambling category block.