Palo Alto URL Filtering with Wildcards

A. Every domain/subdomain pattern would also match every subpage connected to these domains.
B. In PAN-OS 9.1 and 10.0, * and ^ can be used in the same configuration on the same firewall but not in 9.0 and 8.1.
C. Only when decryption is allowed for particular URLs can a filter match subpages.* – matches and – only matches