topic Advanced URL Filtering in General Topics

Advanced URL Filtering

emr_1 — Tue, 22 Jun 2021 00:47:43 GMT

Hi Anyone,

Even I read these docs as below, I could not understand well.

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-new-features/url-filtering-features/advanced-url-filtering.html

https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resources/datasheets/advanced-url-filtering

Do I still need existing PAN-DB subscription, and Adv. is add-on for it?

Can I completely replace PAN-DB subscription with Adv. (no more purchase of existing PAN-DB, and only purchase Adv. one)

It sounds me Adv. URL Filtering position is more like WildFire and people generally purchase Threat Prevention together.

(It means WildFire is add-on for Threat Prevention in my opinion)

Re: Advanced URL Filtering

BPry — Tue, 22 Jun 2021 03:15:29 GMT

@emr_1,

Reading this:

The Advanced URL Filtering license includes access to PAN-DB; f the license expires, the firewall ceases to perform all URL filtering functions, URL category enforcement, and URL cloud lookups. Additionally, all other cloud based updates will not function until you install a valid license.

It would read to me that you either purchase a URL-Filtering subscription or an advanced URL-Filtering subscription, but you wouldn't need to have both. I would reach out to your account team to get an official answer, but it seems like you simply purchase one or the other.

Re: Advanced URL Filtering

LAYER_8 — Tue, 22 Jun 2021 16:20:38 GMT

Adv. URL Filtering will replace traditional URL Filtering. It's the natural evolution of the product (much like the addition of ML in PANOS 10 from 9). The Adv. sub will contain all the same functionality of traditional, with the ML enhancement.

So at your next renewal, you can opt for adv. url to replace your current sub.

Re: Advanced URL Filtering

Schneur_Feldman — Fri, 06 Jan 2023 17:09:09 GMT

@LAYER_8

Question, If put ONLY Advanced Threat on a Palo running 10.1 will I still have any Threat Prevention/IPS?

Since ATP seems not to be supported on 10.1 will I lose my IPS/Threat if I only put ATP on a PA running 10.1?

Re: Advanced URL Filtering

MP18 — Tue, 30 Jan 2024 16:25:36 GMT

@Schneur_Feldman Yes you will have all the IPS and Threat prevention.

Regards