What is the best practice for URL filtering to solve the problem?

You have been tasked with blocking user access to websites that violate company policy, but the sites use dynamic IP addresses.

What is the best practice for URL filtering to solve the problem?
A . Enable URL filtering and use URL categorization to block the websites that violate company policy.
B . Enable URL filtering and create a blacklist to block the websites that violate company policy.
C . Enable URL filtering and create a whitelist to block the websites that violate company policy.
D . Enable URL filtering and use URL categorization to allow only the websites that company policy allows users to access.
E . Enable URL filtering and create a whitelist to allow only the websites that company policy allows users to access.

View Answer

Answer: A

Explanation:

Each website defined in the URL filtering database is assigned one of approximately 60 different URL categories. There are two ways to make use of URL categorization on the firewall:

Block or allow traffic based on URL category –You can create a URL Filtering profile that specifies an action for each URL category and attach the profile to a policy. Traffic that matches the policy would then be subject to the URL filtering settings in the profile. For example, to block all gaming websites you would set the block action for the URL category games in the URL profile and attach it to the security policy rule(s) that allow web access.

See Configure URL Filtering for more information.

Match traffic based on URL category for policy enforcement –If you want a specific policy rule to apply only to web traffic to sites in a specific category, you would add the category as match criteria when you create the policy rule. For example, you could use the URL category streaming-media in a QoS policy to apply bandwidth controls to all websites that are categorized as streaming media. See URL Category as Policy Match Criteria for more information.

By grouping websites into categories, it makes it easy to define actions based on certain types of websites.

Source: https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os/url-filtering/url­categories