Who rated this post

Hi @batd2 and @Schneur_Feldman ,

1. This document says that the real-time-detection category should be set to alert -> https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/url-filtering/test-url-filtering-configura... (note under Verify Advanced URL Filtering).  A-URL will then reclassify the URL and the action will be taken according to the new category.  They have URLs to test and see the logs for yourself.
2. "Alert" will not permit all traffic that matches the category.  As explained in the doc, the most severe action will be taken from all the matched categories.  "Block" will block all traffic that matches the category because it is the most severe action.
3. "Allow" does not log.  So, it makes sense that it disables real-time checks that match this category.  Inline Deep Learning (10.2) https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-new-features/url-filtering-features/cloud-inlin... is also part of A-URL.  So, I don't think it completely disables A-URL.

Like you, I would like to see this recommendation under the URL BP page -> https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/url-filtering/url-filtering-best-practice....

Thanks,

Tom