End-of-Life (EoL)
PAN-DB Cloud Connectivity Issues
To check connectivity between the firewall and the PAN-DB
cloud:
show url-cloud status
If the cloud is accessible, the expected response is similar
to the following:
show url-cloud statusPAN-DB URL Filtering License : valid Current cloud server : s0000.urlcloud.paloaltonetworks.com Cloud connection :connectedURL database version - device : 2013.11.18.000 URL database version - cloud : 2013.11.18.000 ( last update time 2013/11/19 13:20:51 ) URL database status : good URL protocol version - device : pan/0.0.2 URL protocol version - cloud : pan/0.0.2 Protocol compatibility status : compatible
If the cloud is not accessible, the expected response is similar
to the following:
show url-cloud statusPAN-DB URL Filtering License : valid Cloud connection : not connected URL database version - device : 2013.11.18.000 URL database version - cloud : 2013.11.18.000 ( last update time 2013/11/19 13:20:51 ) URL database status : good URL protocol version - device : pan/0.0.2 URL protocol version - cloud : pan/0.0.2 Protocol compatibility status : compatible
Use the following checklist to identify and resolve connectivity
issues:
- Does the PAN-DB URL Filtering license field shows as invalid? Obtain and install a valid PAN-DB license.
- Does the URL database status show as out of date? Download a new seed database by running the following command:request url-filtering download paloaltonetworks region<region>
- Does the URL protocol version show as not compatible? Upgrade PAN-OS to the latest version.
- Can you ping the PAN-DB cloud server from the firewall? Run the following command to check:ping source<<ip-address>host s0000.urlcloud.paloaltonetworks.comFor example, if your management interface IP address is 10.1.1.5, run the following command:ping source 10.1.1.5 host s0000.urlcloud.paloaltonetworks.com
- Is the firewall in an HA configuration? Verify that the HA state of the firewalls is in the active, active-primary, or active-secondary state. Access to the PAN-DB cloud will be blocked if the firewall is in a different state. Run the following command on each firewall in the pair to see the state:show high-availability state
If you still have problems with connectivity between the firewall
and the PAN-DB cloud, contact Palo Alto Networks support.
Recommended For You
Recommended Videos
Recommended videos not found.