Four configuration choices are listed, and each could be used to block access to a specific URL. If you configured each choice to block the same URL, then which choice would be evaluated last in the p

The correct answer is A. PAN-DB URL category in URL Filtering profile. PAN-OS evaluates URL filtering configurations in a specific order of precedence. The processing order from first (highest priority) to last (lowest priority) is: (1) Custom URL categories referenced directly in a Security policy rule, (2) Custom URL categories in a URL Filtering

Submitted by fernanda_arg· Apr 18, 2026Deploy and Configure

Question

Four configuration choices are listed, and each could be used to block access to a specific URL. If you configured each choice to block the same URL, then which choice would be evaluated last in the processing order to block access to the URL?

Options

APAN-DB URL category in URL Filtering profile
BCustom URL category in Security policy rule
CCustom URL category in URL Filtering profile
DEDL in URL Filtering profile

How the community answered

(24 responses)

A
75% (18)
B
4% (1)
C
8% (2)
D
13% (3)

Explanation

PAN-OS evaluates URL filtering configurations in a specific order of precedence. The processing order from first (highest priority) to last (lowest priority) is: (1) Custom URL categories referenced directly in a Security policy rule, (2) Custom URL categories in a URL Filtering profile, (3) External Dynamic Lists (EDLs) in a URL Filtering profile, and (4) PAN-DB (cloud-based) URL categories in a URL Filtering profile. Because PAN-DB categories are the built-in database lookup and are checked after all custom and EDL overrides have been evaluated, they are processed last. This design allows administrators to override cloud-based categorizations with more specific local configurations.

Topics

#URL Filtering#Processing Order#PAN-DB#Custom URL Category

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice