URLs Classified as Not-Resolved

Follow these steps to troubleshoot URLs classified as not-resolved. Not-resolved designation typically signals PAN-DB cloud connectivity issues.
URLs are classified as Not-resolved when your connection to the PAN-DB URL filtering cloud service is disrupted, resulting in failed URL lookups. The cloud connection status and URL classification does not apply to expired subscription licenses or unlicensed users.
Use the following workflow to troubleshoot why some or all of the URLs being identified by PAN-DB are classified as Not-resolved:
  1. Check the PAN-DB cloud connection by running the following command:
    show url-cloud status
    The Cloud connection: field should show
    connected
    . If you see anything other than
    connected
    , any URL that do not exist in the management plane cache will be categorized as
    not-resolved
    . To resolve this issue, see PAN-DB Cloud Connectivity Issues.
  2. If the cloud connection status shows
    connected
    , check the current utilization of the firewall. If firewall utilization is spiking, URL requests may be dropped (may not reach the management plane), and will be categorized as
    not-resolved
    .
    To view system resources, run the following command and view the
    %CPU
    and
    %MEM
    columns:
    show system resources
    You can also view system resources on the System Resources widget on the
    Dashboard
    in the web interface.
  3. If the problem persist, contact Palo Alto Networks support.

Recommended For You