You are an administrator of a Versa Secure SD-WAN network. Due to a recent security event, you need to apply a new URL filtering profile on all of…

URL filtering is a Next-Generation Firewall (NGFW) feature that operates at the application layer (Layer 7) to inspect and control web traffic based on website categories or specific URLs. Within the Versa Networks architecture, all advanced security services, including URL Filtering, Intrusion Prevention System (IPS), and Antivirus (AV), are configured and managed through the NexGen Firewall Template. This template allows administrators to create specific security profiles (e.g., a URL filtering profile) and then apply them within security rules to enforce policy across all designated SD-WAN CPEs.

A. QoS Template: This template is used exclusively for configuring Quality of Service policies, such as traffic shaping, policing, and prioritization, not for security functions.

B. Stateful Firewall Template: This template configures traditional Layer 3/Layer 4 firewall rules based on IP addresses, ports, and protocols, but it does not handle Layer 7 inspection like URL filtering.

D. Common Template: This template is used for applying system-level configurations that are common across devices, such as NTP, DNS, SNMP, and logging settings, not for traffic security policies.

1. Versa Networks

"Versa VOS™ 21.2.2 Administrator Guide": In the section "Templates > Security Templates > Next Gen Firewall Template

" the guide details that this template is the designated location for configuring Unified Threat Management (UTM) services. It explicitly lists URL Filtering

Antivirus

and IPS as features configured within this template.

2. Versa Networks

"Secure SD-WAN Configuration Guide": The chapter on "Security Services" describes the process of creating security profiles. Specifically

the subsection "Configuring URL Filtering Profile" outlines the steps to create a URL filtering policy

which is then applied as part of a rule within the Next Gen Firewall Template. This confirms the functional separation from stateful firewall or QoS templates.