Obtain and install a PAN-DB URL filtering license and confirm that it is installed.
If the license expires, PAN-DB URL Filtering continues to work based on the URL category information that exists in the dataplane and management plane caches. However, URL cloud lookups and other cloud-based updates will not function until you install a valid license.
Device > Licenses
and, in the License Management section, select the license installation method:
Retrieve license keys from license server
Activate feature using authorization code
Manually upload license key
After installing the license, confirm that the PAN-DB URL Filtering section,
field, displays a valid date.
Download the initial seed database and activate PAN-DB URL Filtering.
The firewall must have Internet access; you cannot manually upload the PAN-DB seed database.
In the PAN-DB URL Filtering section,
Choose a region (North America, Europe, APAC, Japan) and then click
to start the download.
After the download completes, click
If PAN-DB is already the active URL filtering vendor and you click
Re-Download, this will reactivate PAN-DB by clearing the dataplane and management plane caches and replacing them with the contents of the new seed database. You should avoid doing this unless it is necessary, as you will lose your cache, which is customized based on the web traffic that has previously passed through the firewall based on user activity.
Schedule the firewall to download dynamic updates for Applications and Threats.
A Threat Prevention license is required to receive content updates, which covers Antivirus and Applications and Threats.
Device > Dynamic Updates.
In the Schedule field in the Applications and Threats section, click the
link to schedule periodic updates.
You can only schedule dynamic updates if the firewall has direct Internet access. If updates are already scheduled in a section, the link text displays the schedule settings.
The Applications and Threats updates sometimes contain updates for URL filtering related to the
Safe Search Enforcement
option in the URL filtering profile (
Objects > Security Profiles > URL Filtering). For example, if Palo Alto Networks adds support for a new search provider vendor or if the method used to detect the Safe Search setting for an existing vendor changes, the Application and Threats updates will include that update.
Enable BrightCloud URL Filtering Enable BrightCloud URL Filtering Obtain and install a BrightCloud URL filtering license and confirm that it is installed. BrightCloud has an ...
Select a URL Filtering Vendor on Panorama
Select a URL Filtering Vendor on Panorama URL filtering enables firewalls to monitor and control web access for your users. The policy rules that you ...
Troubleshoot URL Filtering
Troubleshoot URL Filtering The following topics provide troubleshooting guidelines for diagnosing and resolving common URL filtering problems. Problems Activating PAN-DB PAN-DB Cloud Connectivity Issues URLs ...
Install Content and Software Updates
Install Content and Software Updates To ensure that you are always protected from the latest threats (including those that have not yet been discovered), you ...
Enable a URL Filtering Vendor
Enable a URL Filtering Vendor To enable URL filtering on a firewall, you must purchase and activate a URL Filtering license for one of the ...
PAN-DB Categorization PAN-DB URL Categorization Components PAN-DB URL Categorization Workflow PAN-DB URL Categorization Components The following table describes the PAN-DB components in detail. The BrightCloud ...
Panorama > Device Deployment
Panorama > Device Deployment Select Panorama > Device Deployment to display current deployment information for the managed firewalls. They also enable you to manage software ...
PAN-DB Private Cloud
PAN-DB Private Cloud The PAN-DB private cloud is an on-premise solution that is suitable for organizations that prohibit or restrict the use of the PAN-DB ...