Activate PAN-DB, the Palo Alto Networks URL database.
The Palo Alto Networks-developed URL filtering
database, PAN-DB provides high-performance local caching for maximum
inline performance on URL lookups, and offers coverage against malicious
URLs and IP addresses. As WildFire identifies unknown malware, zero-day
exploits, and advanced persistent threats (APTs), the PAN-DB database
is updated with information on malicious URLs so that you can block
malware downloads and disable Command and Control (C2) communications
to protect your network from cyberthreats. URL categories that identify
confirmed malicious content—malware, phishing, and C2 are updated
every five minutes—to ensure that you can manage access to these
sites within minutes of categorization.
Obtain and install a PAN-DB URL filtering license
and confirm that it is installed.
If the license expires, the firewall ceases to perform
PAN-DB URL Filtering; URL category enforcement, URL cloud lookups,
and other cloud based updates will not function until you install
a valid license.
and, in the License
Management section, select the license installation method:
Retrieve license keys from license server
Activate feature using authorization code
Manually upload license key
After installing the license, confirm that the PAN-DB
URL Filtering section,
displays a valid date.
Activate PAN-DB URL Filtering.
PAN-OS 9.0 and later releases do not download PAN-DB seed
databases. Instead, upon activation of the URL filtering license,
the firewall populates the cache as URL queries are made.
value in the Active field changes to Yes.
Schedule the firewall to download dynamic updates for
Applications and Threats.
A Threat Prevention license is required to receive
content updates, which covers Antivirus and Applications and Threats.
In the Schedule field in the Applications and Threats
section, click the
link to schedule
You can only schedule dynamic updates if the firewall has
direct internet access. If updates are already scheduled in a section, the
link text displays the schedule settings.
and Threats updates sometimes contain updates for URL filtering
related to Safe