URL filtering enables firewalls to monitor and control
web access for your users. The policy rules that you configure to
control web access (Security, QoS, Captive Portal, and Decryption
rules) reference URL categories. The URL filtering vendor you
select on Panorama determines which URL categories are available
for referencing in the rules that you add to device groups and push
By default, Panorama uses PAN-DB, a URL filtering database that
is tightly integrated into PAN-OS and the Palo Alto Networks threat
intelligence cloud. PAN-DB provides high-performance local caching
to maximize in-line performance for URL lookups. The other vendor
option is BrightCloud, a third-party URL database.
Unlike firewalls, Panorama does not download the URL database
and does not require a URL filtering license.