Migrate Panorama and HA Firewalls from BrightCloud to PAN-DB
Perform this procedure to migrate the URL
filtering vendor from BrightCloud to PAN-DB on Panorama and firewalls
when the firewalls are deployed in a high availability (HA) configuration.
In this example, the active (or active-primary) firewall is named
fw1 and the passive (or active-secondary) firewall is named fw2.
The migration automatically maps BrightCloud URL categories to PAN-DB URL categories.
Determine which firewalls require new PAN-DB URL
Log in to Panorama and select
Check the URL column to determine which firewalls
have PAN-DB licenses and whether the licenses are valid or expired.
A firewall can have valid licenses for both BrightCloud
and PAN-DB, but only one license can be active.
you’re not sure whether a PAN-DB URL filtering license is active,
access the firewall web interface, select
, and verify that the
in the PAN-DB URL Filtering
Purchase a new license for each firewall that does
not have a valid PAN-DB license.
In HA deployments, each firewall peer needs a distinct
PAN-DB license and authorization code. Palo Alto Networks sends
an email containing activation codes for the licenses you purchase.
If you can’t find this email, contact Customer Support before proceeding.
Change the URL filtering vendor to PAN-DB on Panorama.
Access the Panorama web interface and perform one of the