1. Home
    2. PAN-OS
    3. Version 8.0
    4. PAN-OS® Administrator’s Guide
    5. URL Filtering
    6. Troubleshoot URL Filtering
    7. PAN-DB Cloud Connectivity Issues
    End-of-Life (EoL)

    PAN-DB Cloud Connectivity Issues

    To check connectivity between the firewall and the PAN-DB cloud:
    show url-cloud status
    If the cloud is accessible, the expected response is similar to the following:
    show url-cloud status
     
PAN-DB URL Filtering 
License :                          valid 
Current cloud server :             	s0000.urlcloud.paloaltonetworks.com 
Cloud connection :                 
    connected
     
URL database version - device :    2013.11.18.000 
URL database version - cloud :     2013.11.18.000  ( last update time 2013/11/19 
 13:20:51 ) 
URL database status :              good 
URL protocol version - device :    pan/0.0.2 
URL protocol version - cloud :     pan/0.0.2 
Protocol compatibility status :    compatible
    If the cloud is not accessible, the expected response is similar to the following:
    show url-cloud status
     
PAN-DB URL Filtering 
License :                          valid 
Cloud connection :                 not connected 
URL database version - device :    2013.11.18.000 
URL database version - cloud :     2013.11.18.000  ( last update time 2013/11/19 
 13:20:51 ) 
URL database status :              good 
URL protocol version - device :    pan/0.0.2 
URL protocol version - cloud :     pan/0.0.2 
Protocol compatibility status :    compatible
    Use the following checklist to identify and resolve connectivity issues:
    • Does the PAN-DB URL Filtering license field shows as invalid? Obtain and install a valid PAN-DB license.
    • Does the URL database status show as out of date? Download a new seed database by running the following command:
      request url-filtering download paloaltonetworks region 
      <region>
    • Does the URL protocol version show as not compatible? Upgrade PAN-OS to the latest version.
    • Can you ping the PAN-DB cloud server from the firewall? Run the following command to check:
      ping source 
      <ip-address>
       host s0000.urlcloud.paloaltonetworks.com
       <
      For example, if your management interface IP address is 10.1.1.5, run the following command:
      ping source 10.1.1.5 host s0000.urlcloud.paloaltonetworks.com
    • Is the firewall in an HA configuration? Verify that the HA state of the firewalls is in the active, active-primary, or active-secondary state. Access to the PAN-DB cloud will be blocked if the firewall is in a different state. Run the following command on each firewall in the pair to see the state:
      show high-availability state
    If you still have problems with connectivity between the firewall and the PAN-DB cloud, contact Palo Alto Networks support.

    Recommended For You

    Recommended Videos

    Recommended videos not found.

    © 2020 Palo Alto Networks, Inc. All rights reserved.

    Techdocs Logo