topic Re: URL categories not being resolved in General Topics

URL categories not being resolved

BTS_MS — Mon, 03 Sep 2012 04:00:04 GMT

Hi,

Our PAN 2020 is setup for URL filtering. After a reboot we're now getting excessive matches for the "unknown" category. It appears URLs are not looked up on "Dynamic DB" and "Cloud DB".

Ex:

(active)> test url www.nds.org.au

www.nds.org.au society (Dynamic db)

(active)> test url-resolve-path www.nds.org.au

URL www.nds.org.au, category unknown

As per instructions from previous threads I've tried to remove www.nds.org.au from the URL cache:

(active)> clear url-cache url www.nds.org.au

This command requires the Palo Alto Networks URL filtering database.

What does the "This command requires the Palo Alto Networks URL filtering database." mean? We are running URL DB version 3933 and FW says it is the latest update.

Many thanks for any direction on resolving this issue.

Re: URL categories not being resolved

mikand — Mon, 03 Sep 2012 07:46:21 GMT

And the license is not expired?

Re: URL categories not being resolved

sraghunandan — Mon, 03 Sep 2012 16:52:10 GMT

Hello,

Make sure that dynamic url filtering is enabled.

The Following command is not readily available until the next major release:-

> clear url-cache url.

The available commands are > clear url-cache all

>delete dynamic-url host all

(This will clear dynamic database cache)

and retry the above test commands.

If this still persists open a case with support to assist you further.

Thank yuou.

Subijith Raghunandan.

Re: URL categories not being resolved

BTS_MS — Mon, 03 Sep 2012 23:54:28 GMT

Hi all,

Thanks for the suggestions. We have dynamic filtering enabled. License is well and truly current. We've already tried the "clear url-cache" which didn't help. We've now logged a case with support.

Thanks.

Re: URL categories not being resolved

BTS_MS — Thu, 06 Sep 2012 03:16:10 GMT

As per TAC's instructions we had to revert to a earlier version of the URL database (then clear cache). We've then upgraded back to the current version. So far it is behaving correctly.

Re: URL categories not being resolved

millfieldschool — Tue, 09 Oct 2012 09:51:28 GMT

in the last two recent updates palo and birght cloud are having issues and its causing alot on not-resolved results for sites that are normally ok. its getting annoying as we have to wait half a day or more for aplo/brightcloud to fix the problem. not what you expect for the kind of money you have to pay for it. I think palo need to look at a new company instead of bright cloud as they are not that great on url calssification always having to submit misclasified ones. we have had Palo for a year now and concidering looking at a new filtering alternative. never had issues light this when we had websense. the thing that is anoying you cannot contact palo direct you have to go through a partner for issues and then you find there knowledge is limited.

darren

Re: URL categories not being resolved

LCMember2860 — Tue, 09 Oct 2012 10:40:48 GMT

Brightcloud were completely down for several hours this morning - no URLs that had to be sent to the cloud db were resolving and I couldn't even look up URLs on their website (in the end we had to allow the "not-resolved" category to restore level of service to our users). Its supposed to be a distributed cloud based solution, I'm not impressed that they can suffer such a major failure.

Re: URL categories not being resolved

millfieldschool — Tue, 09 Oct 2012 10:46:03 GMT

it was the same last week they had issues as well. and its taking them most the morning to resolve them both times. not great at all and no one seems to give you any information why. or palo does not alert end users that they have issues with there updates or that services are down.

Re: URL categories not being resolved

kalyanram.piratla — Tue, 09 Oct 2012 17:19:53 GMT

Millfield School,

Latest update at this point is:

Brightcloud servers are up and running. Can you please upgrade to the latest URL database version and clear up the URL cache and give it go. Hopefully, everything should fall in place.

Re: URL categories not being resolved

kalyanram.piratla — Wed, 10 Oct 2012 08:44:05 GMT

Millfield School,

I have just realised that version 3956 has been released. Can you please upgrade and check the URL categorization now.

The one website that you had emailed me a while back is now being classified as business and economy (Cloud dB) on version 3955. I am very hopeful that you're issues should be sorted out with version 3956.

Regards,

Kalyan