topic PAN-DB Evaluation - How to switch over with minimal impact? in General Topics

PAN-DB Evaluation - How to switch over with minimal impact?

networkadmin — Thu, 23 Jan 2014 18:35:45 GMT

We want to evaluate PAN-DB.

We have the eval license downloaded.

What I'd like to know is, if I hit "activate" in the Web GUI will it immediately kick in, or will it need a commit?

Basically I'd like to know the smoothest way to change over with minimal impact to our end users.

Thanks

Re: PAN-DB Evaluation - How to switch over with minimal impact?

dyang — Thu, 23 Jan 2014 19:24:56 GMT

When you click "activate", there are a number of things that happen in the background, mainly depending on whether or not you previously were using BrightCloud. Generally speaking, though, the "activate" button initializes the PAN-DB cache on your device. If you previously used BrightCloud, that means removing BrightCloud components and converting your URL filtering policies from BrightCloud to PAN-DB. All of this happens in the background, followed by an auto-commit.

You can read more details about the activation process here:

PAN-DB Activation/Installation

If you are in a managed environment, more details can be found here:

BrightCloud to PAN-DB Migration Process with Panorama

Re: PAN-DB Evaluation - How to switch over with minimal impact?

networkadmin — Thu, 23 Jan 2014 19:26:46 GMT

Perfect thanks - so basically just hit "Activate" and sit back and relax?

Re: PAN-DB Evaluation - How to switch over with minimal impact?

dyang — Thu, 23 Jan 2014 19:28:41 GMT

Sure - are you evaluating this on a production device, or do you have a device in TAP mode?

Re: PAN-DB Evaluation - How to switch over with minimal impact?

networkadmin — Thu, 23 Jan 2014 19:43:46 GMT

Production. Nothing too bizarre by way of policies - my main concern was if any manual intervention was needed as part of the "remapping" process.

Re: PAN-DB Evaluation - How to switch over with minimal impact?

dyang — Thu, 23 Jan 2014 19:47:18 GMT

Mapping from BrightCloud to PAN-DB is pretty straightforward, unless Panorama is involved, as there are some things to look out for in regards to how you may have things setup.

Re: PAN-DB Evaluation - How to switch over with minimal impact?

networkadmin — Thu, 23 Jan 2014 19:57:51 GMT

No this is literally just a single unit. I didn't want to find I hit activate and everything would be blocked until I did "something else" (didn't seem to be the case but better safe than sorry and ask)