we have a checkpoint proxy16000 appliance on it we have reverse proxy configuration

[christian1]

I would like to know if it is a good practice to have access to control and url filtering on the same layer

[PhoneBoy]

In releases prior to R80, they were separate due to product limitations.
In R80+ releases, they can be maintained in separate layers, but there is no requirement to do so.
Personally, I see no reason not to keep them separate but specific use cases may dictate otherwise.

Why do you mention Reverse Proxy in this context?
The configuration for that has nothing to do with URL Filtering: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...