The Palo Alto Networks advanced URL filtering
subscription provides real time URL analysis and malware prevention,
in addition to the local PAN-DB URL lookups, to allow a multi-layered
protection solution. The advanced URL filtering configuration is
defined by your URL filtering profile. Installation of the advanced
URL filtering license automatically activates the service for all
subscription services contained in the package.
Obtain and install an Advanced URL filtering license
and confirm that it is installed.
The Advanced URL Filtering license includes access
to PAN-DB; if the license expires, the firewall ceases to perform
all URL filtering functions, URL category enforcement, and URL cloud
lookups. Additionally, all other cloud based updates will not function
until you install a valid license.
and, in the License
Management section, select the license installation method:
Retrieve license keys from license server
Activate feature using authorization code
After installing the license, confirm that the Advanced
URL Filtering section,
displays a valid date.
you activate the advanced URL filtering license, your license entitlements
for PAN-DB and advanced URL filtering might not display correctly
on the firewall — this is a display anomaly, not a licensing issue,
and does not affect access to the services. You can update the licenses
on the firewall to rectify the display issue by using the following
request license fetch
Download and install the latest
PAN-OS content release. PAN-OS Applications and Threats content
release 8390-6607 and later allows firewalls operating PAN-OS 9.x
and later to identify URLs that have been categorized using the
new real-time-detection category, identifying URLs classified by
advanced URL filtering. For more information about the update, refer
to the Applications and Threat Content Release Notes. You can also
review Content Release Notes for apps
and threats on the Palo Alto Networks Support Portal or directly
in the firewall web interface: select
and open the
Release Note for a specific content release version.