topic Re: URL 9.0 URL Category Cache Build Time? in General Topics

URL 9.0 URL Category Cache Build Time?

Sec101 — Thu, 16 Jul 2020 13:40:06 GMT

How long does it take for the URL categories to build in the 9.0 release? We have an issue with google-base app, where almost all google searches come back as the 'not-resolved' category for the first 5 minutes when we change datacenters. 8.1 you could just re-download the seed database, and we never had a problem.

9.0 there isn't such a thing it appears. Has anyone seen this type of activity before, or had to deal with a short time of not-resolved blocks, until 5 minutes later- the exact same google search will run normally?

Yes, our URL license is valid, and shows connected, and no service routes in place, or decryption going on for management interfaces.

Re: URL 9.0 URL Category Cache Build Time?

Thyrion — Thu, 16 Jul 2020 14:30:36 GMT

the url cache should get synced every 8 hours

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/high-availability/reference-ha-synchronization/synchronization-of-system-runtime-information

you could try clearing your cache on both devices over the weekend in case something got 'stuck' and is preventing the sync

Re: URL 9.0 URL Category Cache Build Time?

Sec101 — Thu, 16 Jul 2020 16:10:29 GMT

@Thyrion

Thanks for your quick reply! This is specific to a completely different set of firewalls at a different location, that all traffic would now be passing through. Not the same HA pair.

The new pair doesn't yet have it's cache populated, so we see a bunch of drops due to not-resolved.