PAN-DB Private Cloud
The PAN-DB private cloud is an on-premise solution that
is suitable for organizations that prohibit or restrict the use
of the PAN-DB public cloud service. With this on-premise solution,
you can deploy one or more M-500 appliances as PAN-DB servers within
your network or data center. The firewalls query the PAN-DB private cloud
to perform URL lookups, instead of accessing the PAN-DB public cloud.
The process for performing URL lookups, in both the private and
the public cloud is the same for the firewalls on the network. By
default, the firewall is configured to access the public PAN-DB
cloud. If you deploy a PAN-DB private cloud, you must configure
the firewalls with a list of IP addresses or FQDNs to access the
server(s) in the private cloud.
Firewalls running PAN-OS 5.0 or later versions can communicate
with the PAN-DB private cloud.
When you Set Up the PAN-DB Private Cloud,
you can either configure the M-500 appliance(s) to have direct internet
access or keep it completely offline. Because the M-500 appliance
requires database and content updates to perform URL lookups, if
the appliance does not have an active internet connection, you must
manually download the updates to a server on your network and then,
import the updates using SCP into each M-500 appliance in the PAN-DB
private cloud. In addition, the appliances must be able to obtain
the seed database and any other regular or critical content updates
for the firewalls that it services.
To authenticate the firewalls that connect to the PAN-DB private
cloud, a set of default server certificates are packaged with the
appliance; you cannot import or use another server certificate for
authenticating the firewalls. If you change the hostname on the
M-500 appliance, the appliance automatically generates a new set
of certificates to authenticate the firewalls.
Related Documentation
M-500 Appliance for PAN-DB Private Cloud
M-500 Appliance for PAN-DB Private Cloud To deploy a PAN-DB private cloud, you need one or more M-500 appliances. The M-500 appliance ships in Panorama ...
Set Up the PAN-DB Private Cloud
Set Up the PAN-DB Private Cloud To deploy one or more M-500 appliances as a PAN-DB private cloud within your network or data center, you ...
Configure the PAN-DB Private Cloud
Configure the PAN-DB Private Cloud Rack mount the M-500 appliance. Refer to the M-500 Hardware Reference Guide for instructions. Register the M-500 appliance. For instructions ...
URL Filtering Overview
URL Filtering Overview The Palo Alto Networks URL filtering solution complements App-ID by enabling you to configure the firewall to identify and control access to ...
Configure the Firewalls to Access the PAN-DB Private Cloud
Configure the Firewalls to Access the PAN-DB Private Cloud When using the PAN-DB public cloud, each firewall accesses the PAN-DB servers in the AWS cloud ...
PAN-DB Categorization
PAN-DB Categorization When a user requests a URL the firewall determines the URL category by comparing the URL with the following components (in order) until ...
About the WildFire Appliance
About the WildFire Appliance The WildFire appliance provides an on-premises WildFire private cloud, enabling you to analyze suspicious files in a sandbox environment without requiring ...
Five-Minute Updates for PAN-DB Malware and Phishing URL Categories
Five-Minute Updates for PAN-DB Malware and Phishing URL Categories The Malware and Phishing URL categories in the PAN-DB cloud are now updated every five minutes ...