Palo Alto Networks maintains a Content Delivery Network (CDN) infrastructure for delivering content updates to the Palo Alto Networks firewalls. The firewalls access the web resources in the CDN to perform various App-ID and Content-ID functions. For enabling and scheduling the content updates, see Install Content and Software Updates.
The following table lists the web resources that the firewall accesses for a feature or application:
Resource URL Static Addresses (If a static server is required)
Application Database or the IP address
Threat/Antivirus Database As a best practice, set the update server to This allows the Palo Alto Networks firewall to receive content updates from the server closest to it in the CDN infrastructure. or the IP address
PAN-DB URL Filtering * Resolves to the primary URL and is then redirected to the regional server that is closest: Static IP addresses are not available. However, you can manually resolve a URL to an IP address and allow access to the regional server IP address.
BrightCloud URL Filtering Contact BrightCloud Customer Support.

Related Documentation