URL DB recategorization

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

URL DB recategorization

L3 Networker

Hello ,

We are currently using Panorama 5.0.11 Version .

Most of the website is blocking due to this version .

We have already requested brightcloud to recategorized the URL to new one .

But still we are facing the issuue.

Like widma.com coming to Adult and porn category .

Also how to clear the URL cache via CLI.

1 accepted solution

Accepted Solutions

L3 Networker

Hello Tiwara,

I have done quick test on my test PA box for URL widma.com which is categorized as business-and-economy

> test url widma.com

widma.com business-and-economy (Base db)

you can clear URL cache on your Palo Alto device to assist in making sure the category is reflected correctly

> clear url-cache all

> delete dynamic-url host name widma.com

Please make sure that you've updated Bright-cloud to the latest version 4261.

Regards,

Jahnavi

View solution in original post

8 REPLIES 8

L3 Networker

Hello Tiwara,

I have done quick test on my test PA box for URL widma.com which is categorized as business-and-economy

> test url widma.com

widma.com business-and-economy (Base db)

you can clear URL cache on your Palo Alto device to assist in making sure the category is reflected correctly

> clear url-cache all

> delete dynamic-url host name widma.com

Please make sure that you've updated Bright-cloud to the latest version 4261.

Regards,

Jahnavi

L5 Sessionator

Hi Tiwara,

PanOS version has nothing to do with blocking of the URL. Each individual firewall will have dynamic update section. You need to make sure that you are updating the URL database on regular basis. Here is a link of doc that explains on the setup and automatically updating it.

How to Activate the BrightCloud URL Filtering Service

other than that, if you are looking to understand How Panorama Retrieves BrightCloud Updates. The following document can explain you that

How Panorama Retrieves BrightCloud Updates

However if you are seeing a different result when you are testing the URL from CLI and actual category. Following document explains it

Discrepancy When Using the Test URL command

And the following documents explains how to clear the url cache

How to Clear URL-cache using BrightCloud for URL filtering

Hope this helps in resolving the issue.

Thank you

Numan

L3 Networker

Hello All,

Thanks its working after clearing the cache.

Just to remind

you can configure the timeout value from Device.It is 168 hours by default.

timeout.png

Hello ,

No it still 168 Hrs.

Any advise for the setting .

The above issue has been resolve after manually clear the cache .

Hello Tiwara,

Cache is cleared completely when the "dynamic url cache timeout"  timer expires ,you can change it to 24 hours instead of 168 hours ( 7 days ) default. This value is used to determine the length of time an URL entry can remain in the cache after it is from the URL filtering service.

Dynamic URL cache timeout value is used when the setting "Dynamic URL Filtering"  is enabled on URL filtering profiles which will access the Bright-cloud database in the cloud for the latest categorization information. Otherwise, the URL filtering engine will only check for categorization on-device cache.

More information on URL categorization can be found here: URL Categorization Components and Process

Regards,

Jahnavi.

Hello Jahnavi,

Thanks for the update .

We have update the "dynamic url cache timeout" to 24 Hrs .

 

Hello, I have a problem, I try to open a URL in my organization URL www.encuestas-colsubsidio.com and it blocks me because it is in the category of financial, I would like to know which category to select for URLs to find and recategorize in PA DB.
  • 1 accepted solution
  • 8639 Views
  • 8 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!