Problems Activating PAN-DB

Use the following workflow to troubleshoot PAN-DB activation issues.
  1. Access the PAN-OS CLI.
  2. Verify whether PAN-DB has been activated by running the following command:
    show system setting url-database
    If the response is paloaltonetworks, PAN-DB is the active vendor.
  3. Verify that the firewall has a valid PAN-DB license by running the following command:
    request license info
    You should see the license entry Feature: PAN_DB URL Filtering. If the license is not installed, you will need to obtain and install a license. See Configure URL Filtering.
  4. After installing the license, download a new PAN-DB seed database by running the following command:
    request url-filtering download paloaltonetworks region <region>
  5. Check the download status by running the following command:
    request url-filtering download status vendor paloaltonetworks
    • If the message is different from PAN-DB download:Finished successfully, stop here; there may be a problem connecting to the cloud. Attempt to solve the connectivity issue by performing basic network troubleshooting between the firewall and the Internet. For more information, see PAN-DB Cloud Connectivity Issues.
    • If the message is PAN-DB download: Finishedsuccessfully, the firewall successfully downloaded the URL seed database. Try to enable PAN-DB again by running the following command:
      admin@PA-220> set system setting url-database paloaltonetworks
    • If the problems persists, contact Palo Alto Networks Customer Support.

Related Documentation