In Operational mode, check the cloud App-ID connection:
admin@vm1> show cloud-appid connection-to-cloudIf
the firewall is connected to the cloud, the show command returns:
ACE Cloud server: kcs.ace.tpcloud.paloaltonetworks.com:443Cloud connection: connectedInformation
about the connection also displays. If the firewall is not connected
to the cloud, check whether DNS services are functioning and check
for any other network-related connectivity issues.