Explanation
A SASE solution converges networking and security services into one unified, cloud-delivered solution (see Figure 3-12) that includes the following:
Networking
Software-defined wide-area networks (SD-WANs)
Virtual private networks (VPNs)
Zero Trust network access (ZTNA)
Quality of Service (QoS)
Security
Firewall as a service (FWaaS)
Domain Name System (DNS) security
Threat prevention
Secure web gateway (SWG)
Data loss prevention (DLP)
Cloud access security broker (CASB)

Explanation
Perhaps the easiest way for an attacker to find a victim to exploit is to set up a wireless access point that serves as a bridge to a real network. An attacker can inevitably bait a few victims with "free Wi-Fi access." The main problem with this approach is that it requires a potential victim to stumble on the access point and connect.
The attacker can't easily target a specific victim, because the attack depends on the victim initiating the connection.
https://www.paloaltonetworks.com/blog/2013/11/wireless-man-middle/

The URL Filtering service complements App-ID by enabling you to configure the next-generation firewall to identify and control access to websites and to protect your organization from websites that host malware and phishing pages.