If you have observed through the syslog or the CLI that
PAN-DB is out-of-date, it means that the connection from the firewall
to the PAN-DB cloud is blocked. This usually occurs when the URL
database on the firewall is too old (version difference is more
than three months) and the cloud cannot update the firewall automatically.
In order to resolve this issue, you must re-download an initial
seed database (this operation is not blocked). This will result
in an automatic re-activation of PAN-DB.