What I really like about PAN and what makes it a worthwhile solution is that rather than having an administrator constantly updating a list of prohibited URLs, you can do it by categories. Every one of these URLs gets meta-tagged as hate speech or antisemitic or pornography, or whatever it is, and when you set up the filter everything that's prohibited by HR policy is there. I don't have to maintain anything, it catches everything. 

The URL filtering is excellent. It ensures our users can't access certain sites. 

The multiple categorizations of URLs are quite helpful. For example, if a URL is, a social media website, such as facebook.com, it can be classified at a certain risk level - from high to low.  

The solution offers credential phishing, which is a helpful feature. 

The initial setup is easy.

The solution scales well, according to the firewall.

The stability is very good.

Everything that is available with the firewall is provided to the user.

Palo Alto Networks URL Filtering with PAN-DB is easy to use, easy to operate, and easy to edit. When we want to analyze data, we can download it as a CSV file and just go through with Excel rather than using a complex dashboard.

I have never had any challenges so far that I couldn't figure out myself. Also, when it comes to documentation, Palo Alto is pretty good.

The most valuable feature is that the product can do everything in a single device, including the firewall, rules, and the PBL. It also has good routing and switching.