Clarification around URL Filtering licenses

Reply
L1 Bithead

Clarification around URL Filtering licenses

I just wanted a quick clarification around what you Can and Can't do without a PANDB license, I know you can create Custom URL categories without a license, but can you also use Dynamic External Block List, or can you create a security policy and manually define URLs you want to block?

 

Or does anything around URLs require a PANDB license 

Tags (2)
Highlighted
L7 Applicator

Re: Clarification around URL Filtering licenses

Hello,

 

Here is few more informations regarding actions of URL license expiration or no license situation. 

 

With BrightCloud:

===============
If you are using the BrightCloud database, you can configure the action to take if the URL filtering license expires:

Block—Blocks access to all web sites. Upon license expiration, all URLs are blocked, not just the URL categories previously set to block.

Allow—Allows access to all web sites. Upon license expiration, all URLs are allowed, not just the URL categories set to allow.
With PAN-DB:

===========
If the license expires for PAN-DB, URL filtering is not enforced:

URL categories that are currently in the cache will be used to either block or allow content based on your configuration. Using cached results is a security risk because the categorization information might be stale.

URLs that are not in the cache will be categorized as not-resolved and will be allowed.

 

Hope this helps.

 

/Thanks

Community Manager

Re: Clarification around URL Filtering licenses

A URL filtering license enables URL categorization.

This in turn enables you to add a URL filtering security profile to a security policy, and apply blanket cover actions to users accessing certain categories of website (eg. allow education, block questionable, pop up a 'do you want to continue' page for hacking). Or set URL categories as a destination in a security policy

 

custom categories and dynamic block lists etc do not require this license


Help the community: Like helpful comments and mark solutions
Reaper out
L4 Transporter

Re: Clarification around URL Filtering licenses

I personally always recommend to customers PAN-DB instead of BrightCloud.

 

The reason is because PAN-DB has tight integration with WildFire, in order to update URL categories such as: Malware, Phishing, and Hacking.

 

If you are on BrightCloud, you don’t have the benefits of this integration to feed these categories through WildFire.

L1 Bithead

Re: Clarification around URL Filtering licenses

Thanks Guys! 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!