URL categories can be used as match criteria on which two policy types? (Choose two.)

The correct answer is A. authentication B. decryption. On Palo Alto Networks firewalls, URL categories are supported as match criteria in Authentication policies (to trigger user authentication challenges for specific URL categories) and Decryption policies (to selectively decrypt or exclude traffic based on URL category, such as…

Submitted by alyssa_d· Apr 18, 2026Securing Traffic

Question

Options

Aauthentication
Bdecryption
Capplication override
DNAT

How the community answered

(53 responses)

A
92% (49)
C
2% (1)
D
6% (3)

Explanation

On Palo Alto Networks firewalls, URL categories are supported as match criteria in Authentication policies (to trigger user authentication challenges for specific URL categories) and Decryption policies (to selectively decrypt or exclude traffic based on URL category, such as excluding financial or healthcare sites from SSL inspection). URL categories are NOT available as match criteria in Application Override policies or NAT policies, which use network-layer attributes like zones, addresses, and ports as their match criteria.

Topics

#URL categories#Authentication policy#SSL decryption#Policy match criteria

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice