After you purchase a PAN-DB URL Filtering subscription,
perform these steps to activate the license and ensure that it works
The Palo Alto Networks-developed URL filtering
database, PAN-DB provides high-performance local caching for maximum
inline performance on URL lookups, and offers coverage against malicious
URLs and IP addresses. As WildFire identifies unknown malware, zero-day
exploits, and advanced persistent threats (APTs), the PAN-DB database
is updated with information on malicious URLs so that you can block
malware downloads and disable Command and Control (C2) communications
to protect your network from cyberthreats. URL categories that identify
confirmed malicious content—malware, phishing, and C2 are updated
every five minutes—to ensure that you can manage access to these
sites within minutes of categorization.
If you have purchased
an advanced URL filtering license, which also provides access to
PAN-DB and URL filtering inline ML (PAN-OS 10.0 and later), it is
not necessary to install the additional licenses separately. Installation
of the advanced URL filtering license automatically activates the
service for all subscription services contained in the package.
Obtain and install a PAN-DB URL filtering license
and confirm that it is installed.
If the license expires, the firewall ceases to perform
PAN-DB URL Filtering; URL category enforcement, URL cloud lookups,
and other cloud based updates will not function until you install
a valid license.
and, in the License
Management section, select the license installation method:
Retrieve license keys from license server
Activate feature using authorization code
Manually upload license key
After installing the license, confirm that the PAN-DB
URL Filtering section,
displays a valid date.
Activate PAN-DB URL Filtering.
PAN-OS 9.0 and later releases do not download PAN-DB
seed databases. Instead, upon activation of the URL filtering license,
the firewall populates the cache as URL queries are made.
value in the Active field changes to Yes.
Schedule the firewall to download dynamic updates for
Applications and Threats.
A Threat Prevention license is required to receive
content updates, which covers Antivirus and Applications and Threats.
In the Schedule field in the Applications and Threats
section, click the
link to schedule
You can only schedule dynamic updates if the firewall
has direct internet access. If updates are already scheduled in
a section, the link text displays the schedule settings.
Applications and Threats updates sometimes contain updates for URL
filtering related to Safe