New URL Filtering Category: “real-time-detection”

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
L2 Linker

In late March 2021, we will be introducing a new category, “real-time-detection” to the URL Filtering category list. The “real-time-detection” category will be used by customers who are beta testing the new “Advanced URL Filtering” feature. It will not be functional without a proper beta license. Please contact your account team if you wish to participate in this beta testing program.

 

There is no impact to customers not participating in the beta and no action required of them. 

 

Below is an FAQ regarding the “real-time-detection” category.

 

New URL Filtering Category: "Real-time-detection"New URL Filtering Category: "Real-time-detection"

I am not participating in the beta. Do I need to do anything regarding the new category?

No, nothing needs to be done if you are not participating in the beta program for this new “Advanced URL Filtering” feature. The real-time-detection category will only be functional with proper license required to enable the “Advanced URL Filtering” feature during beta.

 

Is the “real-time-detection” category visible across all PAN-OS versions?

Yes, real-time-detection category is visible across all PAN-OS releases. 

 

Am I going to see any URL Filtering log entry for this category without participating in the beta?

No, you won’t see any log entry with “real-time-detection” category since the category will not be functional without an additional license required to run the “Advanced URL Filtering” feature during beta.

 

When will real-time-detection category be functional?

Late March 2021 for those participating in the beta program.

 

What are the Palo Alto Networks test URLs for the “real-time-detection” category?

You can use the following test domains to test “real-time-detection” categories. These testing URLs are 100% benign, and have been categorized to their respective categories for testing purposes.

 

http://urlfiltering.paloaltonetworks.com/test-real-time-detection-command-and-control

 

http://urlfiltering.paloaltonetworks.com/test-real-time-detection-malware

 

http://urlfiltering.paloaltonetworks.com/test-real-time-detection-phishing

 

http://urlfiltering.paloaltonetworks.com/test-real-time-detection-grayware



Additional Information

 

Best Practices: URL Filtering Category Recommendations

 

 

9 Comments
L0 Member

Can you help us to make more understand about Real time detection & Advanced URL filtering?

L2 Linker

Please reach out to your account tam for more details.

L0 Member

What will happen when the beta ends?

Will it be removed or remain as is in a non-functional state if the applicable license is not present?

 

 

L0 Member

Why does the "real-time-detection" show up in the URL Category List (without an Advanced URL License) on my home unit?

Advanced_URL_Screenshot.jpg

 

 

L7 Applicator

@kejones and you are NOT of the beta program?

L2 Linker

These test urls are design to test the policy to make sure policies are working properly with real-time detection category. They are not testing the Adv URL filtering license.  Any NGFW running content version 8390-6607 and above will have real-time-detection category and will show the log message under url filtering log for these test urls  if real-time detection category is category is set to alert (it is set to alert by default under default profile)

L7 Applicator

@kejones  it looks like @almraza answered your question.

L2 Linker

For those of us that have an advanced url license, are we meant to be blocking real-time-detection?  The above FAQ is quite unclear on this and there is not really any further information to be found in the best practice docs.

L0 Member

Should be be blocking this new category now that it is no longer beta?  

  • 91608 Views
  • 9 comments
  • 5 Likes
Register or Sign-in
Labels
Top Liked Authors