About the output of the "show ctd-agent status security-client" command

Otsuka — Wed, 22 Oct 2025 04:50:15 GMT

Hi everyone,

I'm using a PA-5250.

When I ran the "show ctd-agent status security-client" command, I noticed that the output had changed:
"Security Client UrlCat(2)" had disappeared, and "Security Client WifUpload(0)" was displayed instead.

[Before]
Security Client UrlCat(2) <<<<<<<<<<<<<
Current cloud server: urlcat.hawkeye.services-edge.paloaltonetworks.com:443
Cloud connection: connected

[After]
Security Client WifUpload(0) <<<<<<<<<<<<<
Current cloud server: hawkeye.services-edge.paloaltonetworks.com:443
Cloud connection: connected

The exact trigger is unclear, but it's possible that the change occurred after an OS upgrade (10.2.8-h4 → 11.1.6-h14).

I currently have the following licenses:
- Advanced WildFire License
- Advanced URL Filtering
- Threat Prevention
- WildFire License
- PAN-DB URL Filtering

With the above in mind, I have a couple of questions:

Q1) Is this change in output a result of a specification change caused by the PAN-OS upgrade?

Q2) I assume that this change will not affect the operation or communication of the PA-5250. Is my assumption correct?

Have a nice day!

Best regards,
Mami

topic About the output of the "show ctd-agent status security-client" command in Next-Generation Firewall Discussions

About the output of the "show ctd-agent status security-client" command