Hello friends, welcome back—this is Day 31 of my PCNSA series, and in this video I explained URL and URL-Filtering in Palo Alto Firewall in a very practical way. First, I clarified what a URL (Uniform Resource Locator) is, and why in real networks we must filter URLs—because on the internet there are billions of websites, and not every category is required or safe for an organization. Then I explained how Palo Alto maintains URL information using PAN-DB, where URLs are organized into categories (like shopping, business, terrorism, IT, etc.). I also covered how new websites get categorized—either automatically by Palo Alto when a site becomes popular, or manually when you request re-categorization. After that, I focused on the actions we can take in URL filtering: allow, block, alert, continue, and override. I explained the real meaning of “continue” (user can proceed but logs are generated) and “override” (password-based access with logging, typically for seniors or special cases). Finally, I connected URL filtering with SSL decryption. Because most traffic is HTTPS, without SSL decryption the firewall can’t properly see what site you are actually visiting, so URL filtering becomes incomplete. This topic is very useful for real-time troubleshooting and interviews, so I recommend watching till the end and practicing it in labs.