topic Re: PAN-DB URL Filtering activation problem in General Topics

PAN-DB URL Filtering activation problem

DKanta — Fri, 21 Apr 2017 09:05:22 GMT

Hi All!

i am trying to activate URL Filtering from PAN-DB, but i have problems.

I upload the license manually and i haven't error, but when i try to download the database this error appear:"URL database download: not available."

Then i do the "Retrieve license keys from license server", but this error appear:"Failed to fetch licenses. Failed to get license info. Please try again later."

The update server is correctly configured (updates.paloaltonetworks.com) and i tried to change the service rooute using external interface, but nothing changed.

Have you got any advice?

It is a PA-200 with PAN-OS 8.0.1

Regards,

Daniele

Re: PAN-DB URL Filtering activation problem

TranceforLife — Fri, 21 Apr 2017 09:30:22 GMT

Hi,

Are you trying to migrate from BrightCloud to PAN-DB?

> show system info

> show system setting url-database

Very useful link:

https://www.paloaltonetworks.com/documentation/60/pan-os/pan-os/url-filtering/troubleshoot-url-filtering

Re: PAN-DB URL Filtering activation problem

DKanta — Fri, 21 Apr 2017 09:37:19 GMT

Hi,

yes, i'm migrating from BrightCloud to PAN-DB.

Regards,

Daniele

Re: PAN-DB URL Filtering activation problem

TranceforLife — Fri, 21 Apr 2017 09:43:41 GMT

Try this guide:

https://live.paloaltonetworks.com/t5/Featured-Articles/From-the-Experts-Migrating-from-BrightCloud-to-PAN-DB-in-a-Multi/ta-p/74439

Re: PAN-DB URL Filtering activation problem

DKanta — Fri, 21 Apr 2017 09:55:50 GMT

Hi,

i think i have found the root of the issue: DNS querys goes aged-out.

Regards,

Daniele

Re: PAN-DB URL Filtering activation problem

TranceforLife — Fri, 21 Apr 2017 10:02:50 GMT

They will be aging out as it is UDP protocol.

can you ping from your firewall:

> ping host s0300.urlcloud.paloaltonetworks.com

Do you get resolution?

Re: PAN-DB URL Filtering activation problem

DKanta — Fri, 21 Apr 2017 10:05:15 GMT

hi,

no, the result is "host unknown"

Regards,

Daniele

Re: PAN-DB URL Filtering activation problem

TranceforLife — Fri, 21 Apr 2017 10:08:41 GMT

Can you ping any other host out the Internet? google.com

Do you use mgmt interface for DNS queries or another ?

Re: PAN-DB URL Filtering activation problem

DKanta — Fri, 21 Apr 2017 10:26:01 GMT

Hi,

i tryed to ping google, but the problem is with connectivity, even if i ping 8.8.8.8 don't work

Regards,

Daniele

Re: PAN-DB URL Filtering activation problem

TranceforLife — Fri, 21 Apr 2017 10:44:19 GMT

First make sure your Layers 1, 2 and 3 are good. So you can ping your default gateway or you can use your external interface ip in the service route options.