Brightcloud Url Filtering Cache

[panos]

Hi,

Can we make Pan Cp and DP cache off to use URL filtering always dynamic.

I want from Pan that it always asks to brightcloud

How can I do this ?

[dburns · Accepted solution]

From CLI;

PA> set system setting url-filtering-feature cache false

This requires a restart of the device server

PA> debug software restart device-server

Dominic

[panos]

Thanks for answer.

[mikand]

Speaking of which... does the brightcloud cloud service (or the new upcoming PAN-DB cloud service) any specific ratelimits or such in place?

I mean imagine doing this (disable cache) on a box with lets say 10.000 concurrent users behind?

Or is this maintained by DNS-structure?

[dyang]

There are server rate limits for both BrightCloud and PAN-DB (released with PAN-OS 5.0) to prevent database scraping.

Bulent - why do you want to bypass the device cache and always force a dynamic lookup?

--Doris

[panos]

This is special for one customer.I solved it with this.

[BSadozai]

Hello,

I had issue with URL dynamic filter, in fact dynamic URL filtring stopped to work, and after some searching I found your suggestion to delete URL filtering cache by this process, but I was unable to restart the process (device-server) Job fail. so finaly I reboot the box and the dynamic URL filtering worked again, my question is there any other way to restart this process without rebooting the device ?

Thanks

[panos]

I don't think it is possible.

You can get detailed information about url filtering with Brightcloud from this document

https://live.paloaltonetworks.com/docs/DOC-3264

[dyang]

Hi,

Did you try the CLI command "debug software restart device-server" to restart the device server?  Or was that giving you issues?

--Doris