Palo Alto - Advanced URL Filtering
Use Cases and Deployment Scope
Management of the URL filtering is centralized resulting in a consistent filtering experience that is independent of location/network. User's are able to access different categories of URLs based on AD/Azure group membership. Primarily we use this to prevent access to cloud storage, webmail and other avenues to exfiltrate data. It greatly reduces our risk for leaks of our intellectual property.
Pros
- Centralized Management
- Filtering by URL Category and/or Custom URL Lists
- Frequently Updated
- Categories for Unknown URLs and IPs
Cons
- Reporting mis-categorization is cumbersome
- No ability to re-categorize within environment
- Must manage exceptions by specific URL
Return on Investment
- We have reduced Internet traffic by blocking ad-related URLs
- We have reduced the support required to clean machines from malware
- We have greatly reduced our risk for data loss and exfiltration



