Four configuration choices are listed, and each could be used to block access to a specific URL.
If you configured each choice to block the same URL, then which choice would be evaluated last in the processing order to block access to the URL?
Four configuration choices are listed, and each could be used to block access to a specific URL.
If you configured each choice to block the same URL, then which choice would be evaluated last in the processing order to block access to the URL?
The correct choice that would be evaluated last in the processing order to block access to a URL is the PAN-DB URL category in the URL Filtering profile. The order of precedence for URL filtering is: block list, allow list, custom categories, cached URLs (EDLs), and finally, predefined categories such as PAN-DB. Therefore, the PAN-DB URL category is the last to be evaluated.
Addt info from PAN (B is correct): Precedence for URL filtering ========================== Block list - Manually entered blocked URLs Allow list - Manually entered allowed URLs Custom Categories - User-defined Custom URL Categories Cached - Cached = URLs learned from External Dynamic Lists (EDLs) Pre-Defined Categories - PAN-DB or Brightcloud "canned" / "out of the box" categories. https://live.paloaltonetworks.com/t5/general-topics/understanding-url-filtering-order-url-filtering-precedence/td-p/238682
See comments below.
Correct answer is B The priority for URL filtering is: 1. block list 2. allow list 3.custom categories 4.cached 5.pre-defined categories https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClsmCAC
B as ms101 and confusion
B mz101's link says: " block list allow list custom categories cached pre-defined categories "
B should be the answer: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClsmCAC D is not correct, because security policy is checked "before" any security profiles, including URL filtering profile.
but, isn´t it true that in the moment one of them has a Block action it will stop looking in the rest of them? and all of them are set to Block. In that case the first one to look will also be the last.
Answer is B
PAN-DB URL category in URL Filtering profile. does that mean predefined URL profile ?