Delivers granular control with ease!
Updated April 30, 2021

Delivers granular control with ease!

Anonymous | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User

Overall Satisfaction with Palo Alto Networks URL Filtering PAN-DB

We currently utilize Palo Alto Networks URL Filtering PAN-DB for controlling access for users and user groups in Active Directory. For example, we have groups setup in Active Directory to allow access to say Dropbox. This AD group is then tied into a URL Filtering rule in the security policy to allow whatever application access you configure. This serves us in a few ways.

  • We do not have to create a Firewall change request to add a user to a URL application such as dropbox, rather just add the username into the AD group.
  • Much easier to maintain access for control and Audit purposes when adding or removing a user's permissions.
The granularity of using URL Filtering is pretty straightforward and easy to configure.

Pros

  • Integrates with active directory groups.
  • Provides granular control of URL's and specific application levels.
  • Allowed quick monitoring by categories.

Cons

  • The top down URL filtering match can sometimes be tricky as the user may match something higher in the list and not receive all the permissions you intended.
  • The reporting feature for specific URL's could be more easily configured.
  • There is an additional cost for the URL filtering license.
  • Ease of user access via active directory groups has been a big time saver and reduced management overhead of having a myriad of specific rules for one off user access requests.
  • You can customize the user response pages, so for instance if a user gets a deny response page, we can provide them our direct contact info on how to request a change in the URL filtering policy thus reducing the need for help desk tickets that sit in a queue for any duration.
  • The request a category change feature at Palo works well and always happens within 24 hours. Meaning if a new site is incorrectly categorized into something you are blocking via URL filtering, you can quickly request a re-categorization and be up and running without making any policy changes to your organization's firewall.
Palo support is excellent, and I have never had to wait when contacting them for support. One of the best support teams in the business, in my opinion.

Do you think Palo Alto Networks Advanced URL Filtering delivers good value for the price?

Yes

Are you happy with Palo Alto Networks Advanced URL Filtering's feature set?

Yes

Did Palo Alto Networks Advanced URL Filtering live up to sales and marketing promises?

Yes

Did implementation of Palo Alto Networks Advanced URL Filtering go as expected?

Yes

Would you buy Palo Alto Networks Advanced URL Filtering again?

Yes

Overall website access control via the application or specific URL works well and is pretty easy to configure out of the box assuming you purchased the license. For organizations that have a wide variety of specific user needs for one-off websites, it works fantastic in conjunction with using an active directory group to manage this. Utilizing URL Categories is a very simple and easy way to provide a wider net when specific website control is not such a factor. If URL by category is not granular enough, you also have the option to utilize access permissions or restrictions based on external dynamic lists.

Comments

More Reviews of Palo Alto Networks Advanced URL Filtering

  1. Home
  2. Web Content Filtering Solutions
  3. Palo Alto Networks Advanced URL Filtering Reviews
  4. User Review of Palo Alto Networks Advanced URL Filtering