URL Filtering profiles define how the firewall handles traffic to specific URL categories. A URL Filtering profile is a collection of URL filtering controls that you can apply to individual Security policy rules that allow access to the internet. You can set site access for URL categories, allow or disallow user credential submissions, enable safe search enforcement, and various other settings. To enforce the actions you define in a URL Filtering profile, you need to apply profiles to Security policy rules. The firewall enforces the profile actions on traffic that matches the Security policy rule (for details, see Configure URL Filtering).

The firewall comes with a default profile that blocks threat-prone categories, such as malware, phishing, and adult. You can use the default profile in a Security policy rule, clone it to be used as a starting point for new URL filtering profiles, or add a new URL Filtering profile. You can then customize the newly-added URL profiles and add lists of specific websites that should always be blocked or allowed. For example, you may want to block social-networking sites, but allow some websites that are part of the social-networking category. By default, site access for all URL categories is set to allow when you create a basic URL Filtering profile. This means that the users will be able to browse to all sites freely and the traffic is not logged.