Advanced URL Filtering

[emr_1]

Hi Anyone,

Even I read these docs as below, I could not understand well.

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-new-features/url-filtering-features/advanced-ur...

https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resour...

Do I still need existing PAN-DB subscription, and Adv. is add-on for it?

or

Can I completely replace PAN-DB subscription with Adv. (no more purchase of existing PAN-DB, and only purchase Adv. one)

It sounds me Adv. URL Filtering position is more like WildFire and people generally purchase Threat Prevention together.

(It means WildFire is add-on for Threat Prevention in my opinion)

[BPry · Accepted solution]

@emr_1,

Reading this:

The Advanced URL Filtering license includes access to PAN-DB; f the license expires, the firewall ceases to perform all URL filtering functions, URL category enforcement, and URL cloud lookups. Additionally, all other cloud based updates will not function until you install a valid license.

---

It would read to me that you either purchase a URL-Filtering subscription or an advanced URL-Filtering subscription, but you wouldn't need to have both. I would reach out to your account team to get an official answer, but it seems like you simply purchase one or the other. 

[LAYER_8 · Accepted solution]

Adv. URL Filtering will replace traditional URL Filtering. It's the natural evolution of the product (much like the addition of ML in PANOS 10 from 9). The Adv. sub will contain all the same functionality of traditional, with the ML enhancement. 

So at your next renewal, you can opt for adv. url to replace your current sub. 

[Schneur_Feldman]

@LAYER_8 

Question, If put ONLY Advanced Threat on a Palo running 10.1 will I still have any Threat Prevention/IPS?

Since ATP seems not to be supported on 10.1 will I lose my IPS/Threat if I only put ATP on a PA running 10.1?

[MP18]

@Schneur_Feldman  Yes you will have all the IPS and Threat prevention.

Regards