A URL filtering profile is a collection of URL filtering controls that you can apply to individual security policy rules to enforce your web access policy. The firewall comes with a default profile that is configured to block threat-prone categories, such as malware, phishing, and adult. You can use the default profile in a security policy, clone it to be used as a starting point for new URL filtering profiles, or add a new URL filtering profile. You can then customize the newly-added URL profiles and add lists of specific websites that should always be blocked or allowed. For example, you may want to block social-networking sites, but allow some websites that are part of the social-networking category.