topic PAN-DB download failed. Please check your network connectivity, DNS settings, and NTP settings. in General Topics

PAN-DB download failed. Please check your network connectivity, DNS settings, and NTP settings.

clonesheep — Mon, 04 Dec 2017 10:57:56 GMT

Hi,

have a PA200 Updatet from 6.1.x to 7.0.1 and now i get ther error PAN-DB download failed. Please check your network connectivity, DNS settings, and NTP settings.

This comes when i will reactivate the PAN-DB licenses because there i no downlaod "Cloud is not ready, There was no update from the cloud in the last 125 minutes. ".

I found this help https://live.paloaltonetworks.com/t5/Management-Articles/PAN-DB-Error-URL-Database-Download-Failed/ta-p/63132 but there is no policy what block me but my client becomes the message. My DNS is good. vai ssh i can make a ping host google.com that are good.

The things on this help https://live.paloaltonetworks.com/t5/Management-Articles/Error-Downloading-URLs-after-Migrating-from-BrightCloud-to-PAN/ta-p/62548

show url-cloud status looks not good.
PAN-DB URL Filtering
License : valid
Cloud connection : not connected
URL database version - device : 20171201.80101
URL protocol version - device : pan/0.0.2

> test url yahoo.com

yahoo.com internet-portals (Base db) expires in 0 seconds
yahoo.com cloud-unavailable (Cloud db)

so what can i do to fix this problem?

Re: PAN-DB download failed. Please check your network connectivity, DNS settings, and NTP settings.

kiwi — Mon, 04 Dec 2017 11:33:42 GMT

Hi @clonesheep,

Are you using your management interface for the connection or have you configured a DP port instead ?

Here are some tips to assist you with cloud connectivity issues :

pan-db cloud-connectivity issues

Cheers,

-Kiwi

Re: PAN-DB download failed. Please check your network connectivity, DNS settings, and NTP settings.

MFayez — Mon, 04 Dec 2017 11:38:04 GMT

Try to craete policy for managment interface to external

Re: PAN-DB download failed. Please check your network connectivity, DNS settings, and NTP settings.

clonesheep — Mon, 04 Dec 2017 11:50:35 GMT

I have the management interface for the connection.

Re: PAN-DB download failed. Please check your network connectivity, DNS settings, and NTP settings.

clonesheep — Mon, 04 Dec 2017 11:58:51 GMT

PAN-DB URL Filtering
License : valid
Cloud connection : not connected
URL database version - device : 20171201.80101
URL protocol version - device : pan/0.0.2

> request url-filtering download paloaltonetworks region Europe

PAN-DB update initiated

> ping source MYIP host s0000.urlcloud.paloaltonetworks.com
PING s0000.urlcloud.paloaltonetworks.com (50.18.116.114) from MYIP : 56(84) bytes of data.
64 bytes from s0204.urlcloud.paloaltonetworks.com (50.18.116.114): icmp_seq=1 ttl=50 time=175 ms
64 bytes from s0204.urlcloud.paloaltonetworks.com (50.18.116.114): icmp_seq=2 ttl=50 time=175 ms
64 bytes from s0204.urlcloud.paloaltonetworks.com (50.18.116.114): icmp_seq=3 ttl=50 time=175 ms
^C
--- s0000.urlcloud.paloaltonetworks.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2019ms
rtt min/avg/max/mdev = 175.034/175.156/175.268/0.492 ms

And this looks good too:

Re: PAN-DB download failed. Please check your network connectivity, DNS settings, and NTP settings.

clonesheep — Mon, 04 Dec 2017 14:24:25 GMT

Okay funny thing.

I Updated now to Version 7.0.5-h2 and wow, PAN-DB downlaod goes on.

So my problem is resolved. Thanks everybody who helped.

Re: PAN-DB download failed. Please check your network connectivity, DNS settings, and NTP settings.

BPry — Mon, 04 Dec 2017 15:06:03 GMT

@clonesheep,

I would highly recommend upgrading past that version when you have the time; you are still multiple versions behind within the 7.0 code which means you'll run into bugs that have been fixed further along the track, mutiple security issues are present in your version of code that have been addressed in later releases.