topic Re: how to disable the url-cloud-connect in General Topics

how to disable the url-cloud-connect

Felixcao — Mon, 16 May 2022 16:14:06 GMT

the customer firewall pa3220,version :10.2.1, the mgt interface could not access internet,so that firewall could not upgrade the url database.

but the system log dispaly some high log:url-cloud-connect-failure,the customer want don't see these log.

first solution：delete the PAN_DB_URL_Filtering key

Are there any good other solutions？

Re: how to disable the url-cloud-connect

aleksandar.astardzhiev — Mon, 16 May 2022 19:09:37 GMT

Hey @Felixcao ,

Out of curiosity, but why your customer don't consider using the URL filtering license that he already have paid for?

Does the firewall have Internet access through any of the dataplane interfaces - if yes you can use it for reaching the URL DB cloud with service routes = https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/service-routes

PAN FW support enabling proxy for traffic to Palo cloud, it may be an option if the mgmt does not have direct internet access.

If you remove the URL filtering license, but still use URL filtering profile anywhere in the policy you may start receive warning messages when committing the policy - which are a lot more annoying.

Another question - does your customer don't want to see those logs forwarded to his external log collector or he does not want them on the firewall at all.

Re: how to disable the url-cloud-connect

Felixcao — Tue, 17 May 2022 08:08:09 GMT

Hi: on 9.1 version ,the firewall have one follow cli

delete deviceconfig system update-schedule url-database

but on 10.2 version i could not find same cli，Is there no such function, or use other cli ？

Re: how to disable the url-cloud-connect

spedersen — Thu, 26 Oct 2023 14:02:55 GMT

Hi Felixcao,

Did you find a solution? I have a customer with the same issue.

Re: how to disable the url-cloud-connect

jpham — Thu, 03 Jul 2025 12:23:43 GMT

navigate to device > setup > ACE (app-cloud engine)

and select Disable App-ID Cloud Engine

commit