Palo Alto Networks' New Advanced URL Filtering Security Subscription

[jdelio]

Palo Alto Networks has just released a brand-new Advanced URL Filtering Security Subscription service to further add to your firewall functionality.

Traditionally, standard URL filtering will not provide a real-time solution. A database is downloaded to your firewall, introducing a vulnerable delay in which malicious URLs can pass through.

This new Advanced URL Filtering Security Subscription works alongside with your current PAN-DB URL Filtering solution to offer a real-time URL analysis and malware protection. 

According to PAN's TechDoc on the matter:

"Advanced URL filtering is enabled through the URL filtering profile and uses the same configuration settings. If you already have an operational URL filtering deployment, no additional configuration is necessary to take advantage of advanced URL filtering—all web requests designated as risky are automatically forwarded for analysis. URLs analyzed using advanced URL filtering are displayed in the logs using the category real-time-detection, in addition to the threat type." *

This subscription service is available on PAN-OS 9.0 and later firewalls with Content Release 8390-6607.
Please note that this service is NOT currently available on CN-Series firewalls.

Read more about Palo Alto Networks new real-time URL filtering subscription service in the PAN-OS New Features Guide.

Please keep coming back to learn more about Palo Alto Networks solutions and other helpful information.

Thanks for taking time to read my blog.

If you enjoyed this, please hit the Like (thumb up) button, don't forget to subscribe to the LIVEcommunity Blog area.

As always, we welcome all comments and feedback in the comments section below.

Stay Secure,
Joe Delio
End of line

[santonic]

Does this licence already include standard URL Filtering licence? Or you need to purchase both? 

[jdelio]

@santonic 

Please allow me to clarify..  

The URL Filtering is a separate from the Advanced URL filtering. 

But the URL Filtering is included with the Advanced URL Filtering service.

[Converged]

I think in from the Nov 2021 price list the URL4 part number was discontinued, so now you can only buy advanced URL filtering in many cases

for example this no longer exists:

PAN-PA-220-URL4-R

PANDB URL filtering subscription renewal, PA-220

but:

PAN-PA-220-ADVURL

Advanced URL Filtering Subscription, 1-year, PA-220

does

[ReubenFarrelly]

@jdelio   According to this:
https://docs.paloaltonetworks.com/url-filtering

The normal URL Filtering Subscription is no longer available for purchase but can be used until the end of the service term.

Unfortunately for me I recently renewed my PA license for 3 years so it looks like I am stuck on the non-Advanced URL filtering until that runs out.

Have you heard if there any plans or option for people to upgrade from the now-not-sold URL filtering to the new Advanced URL filtering?  Feels like if I had paid less by only renewing for 1 year, I would have had the option to ugprade and get the more advanced option.

[kiwi]

Hi @ReubenFarrelly ,

I recommend reaching out to your sales rep to see what options are available to you to get you on the new and improved Advanced URL Filtering.

Cheers !

-Kiwi.

[MayureshBhate]

Hi

technically this seems to be unclear how this works out. 

statement is - 

"all web requests designated as risky are automatically forwarded for analysis"

however there are 3 subcategories under Risky - High, Medium and Low risk. 

so, exactly which category URLs are sent to Advance URL filtering in this case?

secondly, (if i take example) Imagine high risk category URLs are allowed, then with advance URL filtering feature, it will categorize URL from high risk category to lets say C&C or phishing category using AI/ML based analysis?