Clarification around URL Filtering licenses

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Clarification around URL Filtering licenses

L1 Bithead

I just wanted a quick clarification around what you Can and Can't do without a PANDB license, I know you can create Custom URL categories without a license, but can you also use Dynamic External Block List, or can you create a security policy and manually define URLs you want to block?

 

Or does anything around URLs require a PANDB license 

1 accepted solution

Accepted Solutions

Cyber Elite
Cyber Elite

A URL filtering license enables URL categorization.

This in turn enables you to add a URL filtering security profile to a security policy, and apply blanket cover actions to users accessing certain categories of website (eg. allow education, block questionable, pop up a 'do you want to continue' page for hacking). Or set URL categories as a destination in a security policy

 

custom categories and dynamic block lists etc do not require this license

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

View solution in original post

4 REPLIES 4

L7 Applicator

Hello,

 

Here is few more informations regarding actions of URL license expiration or no license situation. 

 

With BrightCloud:

===============
If you are using the BrightCloud database, you can configure the action to take if the URL filtering license expires:

Block—Blocks access to all web sites. Upon license expiration, all URLs are blocked, not just the URL categories previously set to block.

Allow—Allows access to all web sites. Upon license expiration, all URLs are allowed, not just the URL categories set to allow.
With PAN-DB:

===========
If the license expires for PAN-DB, URL filtering is not enforced:

URL categories that are currently in the cache will be used to either block or allow content based on your configuration. Using cached results is a security risk because the categorization information might be stale.

URLs that are not in the cache will be categorized as not-resolved and will be allowed.

 

Hope this helps.

 

/Thanks

Cyber Elite
Cyber Elite

A URL filtering license enables URL categorization.

This in turn enables you to add a URL filtering security profile to a security policy, and apply blanket cover actions to users accessing certain categories of website (eg. allow education, block questionable, pop up a 'do you want to continue' page for hacking). Or set URL categories as a destination in a security policy

 

custom categories and dynamic block lists etc do not require this license

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

I personally always recommend to customers PAN-DB instead of BrightCloud.

 

The reason is because PAN-DB has tight integration with WildFire, in order to update URL categories such as: Malware, Phishing, and Hacking.

 

If you are on BrightCloud, you don’t have the benefits of this integration to feed these categories through WildFire.

L1 Bithead

Thanks Guys! 

  • 1 accepted solution
  • 8991 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!