Enable PAN-DB URL Filtering

After you purchase a PAN-DB URL Filtering subscription, perform these steps to activate the license and ensure that it works as expected.
The Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content—malware, phishing, and C2 are updated every five minutes—to ensure that you can manage access to these sites within minutes of categorization.
If you have purchased an advanced URL filtering license, which also provides access to PAN-DB and URL filtering inline ML (PAN-OS 10.0 and later), it is not necessary to install the additional licenses separately. Installation of the advanced URL filtering license automatically activates the service for all subscription services contained in the package.
  1. Obtain and install a PAN-DB URL filtering license and confirm that it is installed.
    If the license expires, the firewall ceases to perform PAN-DB URL Filtering; URL category enforcement, URL cloud lookups, and other cloud based updates will not function until you install a valid license.
    1. Select
      and, in the License Management section, select the license installation method:
      • Retrieve license keys from license server
      • Activate feature using authorization code
      • Manually upload license key
    2. After installing the license, confirm that the PAN-DB URL Filtering section,
      Date Expires
      field, displays a valid date.
  2. Activate PAN-DB URL Filtering.
    PAN-OS 9.0 and later releases do not download PAN-DB seed databases. Instead, upon activation of the URL filtering license, the firewall populates the cache as URL queries are made.
    1. Click
      . The value in the Active field changes to Yes.
  3. Schedule the firewall to download dynamic updates for Applications and Threats.
    A Threat Prevention license is required to receive content updates, which covers Antivirus and Applications and Threats.
    1. Select
      Dynamic Updates
    2. In the Schedule field in the Applications and Threats section, click the
      link to schedule periodic updates.
      You can only schedule dynamic updates if the firewall has direct internet access. If updates are already scheduled in a section, the link text displays the schedule settings.
      The Applications and Threats updates sometimes contain updates for URL filtering related to Safe Search Enforcement.

Recommended For You