CLI Commands for Troubleshooting BrightCloud URL Database Download
Resolution
Overview
This document describes the CLI commands that can be used to verify a successful connection to the BrightCloud server.
Details
Command to test BrightCloud connectivity
>debug device-server test url-update-server
This command will return either “success” or “failure to connect to url update server”.
Command to manually load the BrightCloud URL DB into the Palo Alto Networks device:
> request url-filtering upgrade brightcloud
Command to delete the BrightCloud database from the Palo Alto Networks device:
> debug device-server reset brightcloud-database
cfg.latest-url-version: 0
cfg.url-version: 0
Command to capture the initial download of the URL DB into the file, test_bc_download.pcap:
> request url-filtering upgrade brightcloud test
Command to view the progress of the download and packet capture:
> tail follow yes mp-log pan_bc_download.log
Command to view the test pcap:
> view-pcap filter-pcap test_bc_download.pcap
14:58:07.518025 IP 64.87.3.54.http > 172.17.128.39.57304: P 3727295829:3727297233(1404) ack 1969658105 win 64895 <nop,nop,timestamp 61965404 17298843>
14:58:07.518041 IP 172.17.128.39.57304 > 64.87.3.54.http: . ack 1404 win 136 <nop,nop,timestamp 17298870 61965404>
The pcap file may also be exported to an external host by scp or tftp:
> tftp export filter-pcap from test_bc_download.pcap to <tftp host>
> scp export filter-pcap from test_bc_download.pcap to username@host:path
To verify the Status of the BrightCloud Servers and cross-check any service disruptions, visit: www.brightcloud.com/status.
owner: apasupulati