Use external dynamic lists in URL filtering profiles
instead of block or allow lists for custom URL control that doesn’t
require making changes on the firewall.
To protect your network from new sources of threat or
malware, you can use External Dynamic
Lists in URL Filtering profiles to block or allow, or to
define granular actions such as continue, alert, or override for
URLs, before you attach the profile to a Security policy rule. Unlike
the allow list, block list, or a custom URL category on the firewall,
an external dynamic list gives you the ability to update the list
without a configuration change or commit on the firewall. The firewall
dynamically imports the list at the configured interval and enforces policy
for the URLs (IP addresses or domains will be ignored) in the list.
For URL formatting guidelines, see URL Category Exception Lists.