topic Re: Dynamic URL filtering??? in General Topics

Dynamic URL filtering???

CWillms — Fri, 24 Sep 2010 15:18:39 GMT

What is it exactly - and is it recommended? I've seen some posts here that indicate turning it off solved some poor performance issues. I guess I'm asking whether I should turn this feature on and what will it buy me?

Ver 3.1.4 PA 2020

Re: Dynamic URL filtering???

jpa — Fri, 24 Sep 2010 16:28:53 GMT

As for the feature -

When a URL category cannot be determined using the local database, dynamic URL filtering will send all URL unknown category to BrightCloud server in the cloud for resolution in real time. The response is then cached in the dataplane. The response from the brightcloud server will be stored in the local cache for 7 days.

Re: Dynamic URL filtering???

networkadmin — Fri, 24 Sep 2010 16:46:11 GMT

I can't say I've noticed it impacting performance unless the daemon/service died which we had happen a few times - though this seems to have been fixed in one of the recent PAN OS 3.1.x releases.

I don't know how quickly Brightcloud respond to zero days threats/websites but in theory dynamic filtering is incredibly useful.