How to Install and Activate PAN-DB for URL Filtering

Printer Friendly Page

Overview

This document describes the steps to install and activate PAN-DB for URL-filtering.

 

Steps

The Management Interface is used to connect to the cloud. Please ensure internet connectivity before you proceed.

  1. License the Palo Alto Networks device for PAN-DB and activate the license on the device.
    1. Navigate to Device > Licenses
    2. Click Retrieve license keys from license server or Activate feature using auth code
  2. Download the URL DB initial seed file optimized for a specific region:
    1. Navigate to Device > Licenses
    2. Click Download under the Palo Alto Networks URL filtering
  3. Once downloaded, activate the seed file. This will apply the PAN-DB and initiate a reset of the system.
    Note: Before clicking Activate, make sure any unsaved changes to the device configuration are committed to avoid losing any pending changes.

 

As part of the activation process, PAN-OS will also automatically migrate any existing URL filtering profiles to use the PAN-DB categories. This is done with an auto-commit in the background; no device reboot required.  As always, save your configuration before making any changes, and be sure to double check URL filtering profiles after to verify policy.

 

The following information can be viewed in the system logs:

After the download

 

After the activation

 

Useful CLI Commands

> show system setting url-database

> request url-filtering download paloaltonetworks region <region-name>

> request url-filtering download status vendor paloaltonetworks

> set system setting url-database paloaltonetworks

 

See Also

For a full list of BrightCloud to PAN-DB category mapping, refer to the following document: BrightCloud to PAN-DB Category Mapping

How to Migrate URL Database from BrightCloud to PAN-DB on HA Devices

 

owner: apasupulati

Comments

What is the best method for doing this when working with an HA (active/passive) pair?

Did you ever get an update from Palo Alto or another contributor on this item, I have the same question.