Enable PAN-DB URL Filtering

  1. Obtain and install a PAN-DB URL filtering license and confirm that it is installed.
    If the license expires, the firewall ceases to perform PAN-DB URL Filtering; URL category enforcement, URL cloud lookups, and other cloud based updates will not function until you install a valid license.
    1. Select
      Device
      Licenses
      and, in the License Management section, select the license installation method:
      • Retrieve license keys from license server
      • Activate feature using authorization code
      • Manually upload license key
    2. After installing the license, confirm that the PAN-DB URL Filtering section,
      Date Expires
      field, displays a valid date.
      url-filtering-pan-db1.png
  2. Download the initial seed database and activate PAN-DB URL Filtering.
    The firewall must have Internet access; you cannot manually upload the PAN-DB seed database.
    1. In the PAN-DB URL Filtering section,
      Download Status
      field, click
      Download Now
      .
    2. Choose a region and then click
      OK
      to start the download.
    3. After the download completes, click
      Activate
      . The value in the Active field changes to Yes.
      url-filtering-pan-db2.png
      If PAN-DB is already the active URL filtering vendor, clicking
      Re-Download
      clears the dataplane and management plane caches and replaces them with a new seed database. You should avoid doing this unless it is necessary, as you will lose your cache, which is customized based on your users’ web traffic.
  3. Schedule the firewall to download dynamic updates for Applications and Threats.
    A Threat Prevention license is required to receive content updates, which covers Antivirus and Applications and Threats.
    1. Select
      Device
      Dynamic Updates
      .
    2. In the Schedule field in the Applications and Threats section, click the
      None
      link to schedule periodic updates.
      You can only schedule dynamic updates if the firewall has direct internet access. If updates are already scheduled in a section, the link text displays the schedule settings.
      The Applications and Threats updates sometimes contain updates for URL filtering related to Safe Search Enforcement.

Related Documentation