URL Filtering gives you a way to control not only web access, but how users interact with online content. PAN-DB—the URL Filtering cloud— classifies sites based on content, features, and safety, and you can enforce your security policy based on these URL categories. You can also prevent credential phishing theft by tightly controlling the types of sites to which users can enter their corporate credentials.

Visit Test A Site to see how PAN-DB categorizes a URL, and to learn about all available URL categories. 

Review the URL Filtering datasheet for a high-level summary of how URL Filtering enables safe web access; protect your users from dangerous websites, malware sites, credential-phishing pages and attacks attempting to leverage web browsing to deliver threats.

What's New

The Advanced URL Filtering security subscription provides a new, cloud-based ML-powered web security engine that protects you against advanced web-based attacks by performing web traffic inspection in real-time. Prevent known and unknown advanced, file-less web-based attacks including targeted phishing, web-delivered malware and exploits, command-and-control, social engineering, and other types of web attacks.

Now available as an optional security subscription with PAN-OS 9.0 and later.

With URL Filtering inline ML, you can now prevent JavaScript exploits and phishing attacks found in webpages from entering your network in real-time with the power of machine learning.

Now available with PAN-OS 10.0!

BrightCloud® support has been removed from PAN-OS 9.1 and later releases. Earlier releases of PAN-OS will continue to support BrightCloud

New security-focused URL categories allow you to write simple security policy based on website safety. The new categories—like high-risk, medium-risk, and newly-registered domains—identify sites that are likely to expose you to web-based threats.

Now available with PAN-OS 9.0!

Multi-category URL Filtering moves you beyond a "block-and-allow" approach to controlling web access, and instead control how users interact with online content.

Now available with PAN-OS 9.0!

Firewalls with URL Filtering running any PAN-OS version can leverage the latest PAN-DB analysis features:

  • Real Time Updates

When a user first attempts to access an unknown site, PAN-DB can now categorize the site in real-time. A firewall running any PAN-OS version with URL Filtering can enforce subsequent attempts to access the site based on it's URL category, instead of treating it as unknown. 

  • Machine Learning for Images: Phishing

PAN-DB uses AI-based image recognition to compare what a site looks like to the human eye, against the site's source code. Within seconds, PAN-DB can identify sophisticated phishing sites that might evade standard detections and are convincingly designed to imitate real, trusted sites—like a corporate or bank login page.  

Featured Content

Prevent Credential Theft


Safeguard corporate credentials that, in the wrong hands, might allow bad actors unauthorized access to your network. Mix with multi-factor authentication for best results.

Enforce Safe Search


Search engines provide a safe search mode that filters out adult content. You can enable safe search for your users, and also block search results if safe search settings are turned off.

URL Filtering FAQs


Check out the URL Filtering datasheet to learn about the benefits of URL Filtering, and how it works.

Documentation for the PAN-OS Version You're Using

URL Filtering with PAN-OS 10.1


URL Filtering with PAN-OS 10.0


URL Filtering with PAN-OS 9.1


URL Filtering with PAN-OS 9.0


Videos

Protect Against Phishing and Malicious Sites

Stop Credential Based Attacks

Tutorial: How to Configure URL Filtering