If you only want to log the accessed url's, allow only specific url's for example to a dmz server or as in your case you only need to block one (ore more) specific address(es) --> ther is no need for the url subscription With the url subscription you can apply actions based on url categories. Here a few examples: Block malware, phishing, peer2peer, dyn-dns, unknown If your company policy does not allow social media Allow downloads on all websites exept risky categories With PAN-OS 8: allow your users to enter credentials on benign websites but not on unknown ... The list with possibilities is nearly endless 😉 But the main point is, that the subscription is for these categories and this is a point which you definately cannot do by yourself. (Of course there are also other possibilities for "url filtering" for example DNS based, but this never gives you the control as you have it with actual http based url filtering)
... View more