topic Re: PA-440 not showing Dynamic Updates for Url Filtering in Next-Generation Firewall Discussions

PA-440 not showing Dynamic Updates for Url Filtering

luishoracio.arizaga — Thu, 23 Nov 2023 16:36:37 GMT

Hello, I'm using PA-400 PANos 10.2.6 and can't see the updates for URL Filtering (not even one DB). Antivirus, Wildfire, Apps and Threats are shown. I have advanced url filtering licence.

Does anyone know how to solve this?

Regards,

Luis

Re: PA-440 not showing Dynamic Updates for Url Filtering

aleksandar.astardzhiev — Thu, 23 Nov 2023 18:17:23 GMT

Hi @luishoracio.arizaga

When comes to URL Filtering, Palo Alto firewall doesn't use local URL database in general terms. Yes it will regularly download and update a "seed" file, which will act as initial cache, which contains the most common URLs for your region, so firewall will not go to the cloud. For any other URL that is not in that seed file and it is not in firewall cache it will query the cloud.

Can you following the instructions from this guide and check the output?
https://docs.paloaltonetworks.com/advanced-url-filtering/administration/troubleshooting/pan-db-cloud-connectivity-issues

Re: PA-440 not showing Dynamic Updates for Url Filtering

luishoracio.arizaga — Fri, 24 Nov 2023 09:32:49 GMT

Thanks for the answer 🙂 cloud is connected and I can verify urls categories