Exam 156-215.81 topic 1 question 101 discussion

D. The host portion of the URL. When URL Filtering is enabled, the Check Point gateway extracts the host portion of the URL from the HTTP request. This host portion is then sent to the Check Point Online Web Service for categorization. The categorization service determines the category of the URL (e.g., social media, news, adult content, etc.) and sends this information back to the gateway. The gateway then applies the appropriate security policy based on the URL category. This process ensures that only the necessary information (the host portion of the URL) is sent for analysis, rather than the entire communication, which helps in maintaining privacy and reducing the amount of data transmitted.

When URL Filtering is set, employee data is kept private when attempting to determine a site category. Only the host part of the URL is sent to the CheckPoint Online Web Service. This data is also encrypted. Check Point Certified Security Administrator (CCSA) R81.10 page 403

Correct. An older document, but p.31: "A local cache that gives answers to 99% of URL categorization requests. When the cache does not have an answer, only the host name is sent to the Check Point Online Web Service for categorization. " https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/24853/FILE/CP_R77_ApplicationControlURLFiltering_AdminGuide.pdf