Palo Alto Networks Certified Network Security Engineer (PCNSE)Core ConceptsEasy
A security administrator is configuring a new Palo Alto Networks firewall and needs to ensure that internal users can access external websites securely. The administrator has configured a security policy to allow web-browsing applications. To prevent users from accessing malicious or inappropriate websites, which security profile should be attached to this policy?
- AVulnerability Protection Profile
- BAntivirus Profile
- CFile Blocking Profile
- DURL Filtering Profile
Show answer & explanationAnswer & explanation
Correct answer: D. URL Filtering Profile
The URL Filtering Profile is specifically designed to control user access to websites based on categories (e.g., 'gambling', 'malware', 'news'), custom URL lists, or specific patterns. Attaching this profile to the security policy that allows web-browsing ensures that access to malicious or inappropriate websites is blocked or alerted.
Why the other options are wrong
- A. Vulnerability Protection profiles detect and block exploits against known vulnerabilities, not access to website categories.
- B. Antivirus profiles scan files for malware, but do not control access to websites based on their category.
- C. File Blocking profiles prevent specific file types from being transferred, not access to websites.
URL Filtering Profile
A URL Filtering Profile in Palo Alto Networks firewalls is used to control user access to websites based on predefined categories, custom URL lists, or real-time classification, preventing access to malicious or inappropriate content.
- Controls web access based on URL categories.
- Can block, allow, or alert on specific categories.
- Essential for web security and compliance.
Memory trick: Profiles are the Guards: URL for Websites, AV for Files, Vuln for Exploits.