Is the firewall in an HA configuration? Verify that the HA
state of the firewalls is in the active, active-primary, or active-secondary
state. Access to the PAN-DB cloud will be blocked if the firewall
is in a different state. Run the following command on each firewall
in the pair to see the state:
show high-availability state
If you still have problems with connectivity between the firewall
and the PAN-DB cloud, contact Palo Alto Networks support.