Change the URL Filtering Vendor on HA Panorama

In a high availability (HA) deployment, each Panorama peer must be in a non-functional state when you change the URL filtering vendor. Therefore, to avoid disrupting Panorama operations, change the URL filtering vendor on the passive Panorama (Panorama2 in this example) and then trigger failover before changing the vendor on the active Panorama (Panorama1 in this example).
  1. Change the URL filtering vendor on each Panorama HA peer.
    Complete this task on Panorama2 (passive peer) before Panorama1 (active peer).
    1. Log in to the Panorama web interface.
    2. Select
      Panorama
      High Availability
      and
      Suspend local Panorama
      .
      When you perform this step on Panorama1, failover occurs and Panorama2 becomes active.
    3. Select
      Panorama
      Setup
      Management
      and edit the General Settings.
    4. Select the
      URL Filtering Database
      vendor:
      paloaltonetworks
      (PAN-DB) or
      brightcloud
      .
    5. Select
      Panorama
      High Availability
      and
      Make local Panorama functional
      .
      When you perform this step on Panorama1 with preemption enabled on both HA peers, Panorama1 automatically reverts to active status and Panorama2 reverts to passive status.
  2. Verify that the URL categories are available for referencing in policies.
    1. Select
      Objects
      Security Profiles
      URL Filtering
      .
    2. Click
      Add
      and verify that the
      Categories
      tab of the URL Filtering profile dialog displays the URL categories associated with the selected vendor.

Related Documentation