Palo Alto Networks Advanced URL filtering subscription provides real time URL analysis and malware prevention to generate a more accurate analysis of URLs than possible with traditional web database filtering techniques alone. This subscription service is available on firewalls operating PAN-OS 9.0 and later, with the installation of content release 8390-6607 and later.
URL Filtering licenses have been replaced by Advanced URL Filtering licenses (including on devices not running PAN-OS 9.0 or later). If the customer is not on a 9.0 or above, they'll get the existing functionality from base URL filtering without the real-time-detection feature. If they require the full feature functionality, they should upgrade to the appropriate PAN-OS version.
You might encounter a problem when you activate Advanced URL Filtering after the old PAN-DB license has expired. As a result, both URL filtering licenses will be visible on the firewall and you might end up getting license errors.
There is a nice fix for this behavior in the following KB. But here's the spoiler: You need to delete the old license through the CLI.
LICENSE ERRORS WHEN MIGRATING FROM PAN-DB URL4 TO ADVANCED URL FILTERING
If you're running PAN-OS 10.1.3 and see messages indicating a license problem for URL Filtering then you might want to check with support if you're not hitting PAN-178194.
Feel free to share your questions, comments and ideas in the section below.
Thank you for taking time to read this blog.
Don't forget to hit the Like (thumbs up) button and to Subscribe to the LIVEcommunity Blog area.
Kiwi out!
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
| Subject | Likes |
|---|---|
| 5 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
