Follow these steps to install and activate your Palo
Alto Networks URL filtering license and schedule updates.
The Palo Alto Networks-developed URL filtering
database, PAN-DB provides high-performance local caching for maximum
inline performance on URL lookups, and offers coverage against malicious
URLs and IP addresses. As WildFire identifies unknown malware, zero-day
exploits, and advanced persistent threats (APTs), the PAN-DB database
is updated with information on malicious URLs so that you can block
malware downloads and disable Command and Control (C2) communications
to protect your network from cyberthreats. URL categories that identify
confirmed malicious content—malware, phishing, and C2 are updated
every five minutes—to ensure that you can manage access to these
sites within minutes of categorization.
If you have purchased
an advanced URL filtering license, which also provides access to
PAN-DB and URL filtering inline ML, it is not necessary to install
the additional licenses separately. Installation of the advanced URL
filtering license automatically activates the service for all subscription
services contained in the package.
Obtain and install a PAN-DB URL filtering license
and confirm that it is installed.
If the license expires, the firewall ceases to perform
PAN-DB URL Filtering; URL category enforcement, URL cloud lookups,
and other cloud based updates will not function until you install
a valid license.
and, in the License
Management section, select the license installation method:
Retrieve license keys from license server
Activate feature using authorization code
Manually upload license key
After installing the license, confirm that the PAN-DB
URL Filtering section,
displays a valid date.
Activate PAN-DB URL Filtering.
PAN-OS 9.0 and later releases do not download PAN-DB
seed databases. Instead, upon activation of the URL filtering license,
the firewall populates the cache as URL queries are made.
value in the Active field changes to Yes.
Schedule the firewall to download dynamic updates for
Applications and Threats.
A Threat Prevention license is required to receive
content updates, which covers Antivirus and Applications and Threats.
In the Schedule field in the Applications and Threats
section, click the
link to schedule
You can only schedule dynamic updates if the firewall
has direct internet access. If updates are already scheduled in
a section, the link text displays the schedule settings.
Applications and Threats updates sometimes contain updates for URL
filtering related to Safe