topic URL Category - Real time detection in General Topics

URL Category - Real time detection

Schneur_Feldman — Fri, 21 Oct 2022 16:55:29 GMT

Can anyone explain what is the Real Time detection URL category? And what it does?

OtakarKlier — Fri, 21 Oct 2022 17:14:42 GMT

Hello,

The definition is:

Detects New and Unknown Malicious Web-Based Attacks in real-time. This is a feature of Advanced URL Filtering.

Here is a link to the white paper describing it.

Regards,

Schneur_Feldman — Fri, 21 Oct 2022 17:43:07 GMT

So should I block it? Or set it to allow?

Also, what does the Encrypted DNS block?

DavePalo — Fri, 21 Oct 2022 21:41:19 GMT

Recommendation is to block Real Time Detection and Encrypted DNS

Blocking Encrypted DNS stops DNS over HTTPS, forcing your clients to revert to regular DNS that the Palo Alto can see.

Please see blog on Encrypted DNS below for more info:

OtakarKlier — Mon, 24 Oct 2022 15:39:38 GMT

Hello,

I would say block it. Here you can watch a video I made for secure DNS. You can use any provider for secure DNS.

Regards,