Difference in URL block categories between panorama and device

Reply
Highlighted
Not applicable

Difference in URL block categories between panorama and device

I have 2 PA-2050 being managed by panorama, all running 3.1.6.  I am using the brightcloud url filtering service we paid for and both devices are up to date.

When I do a commit all from panorama it shows "commit all succeeded", however when I check the details of the commit I get a list of messages similar to "member arts is an invalid reference".

I can see that the URL block categories on the devices are obviously different than those listed in the panorama URL filtering security profile in panorama.  I didn't find anything in the admin guide or the release notes.

Can anyone explain this anomoly?

I have attached an image of the default URL block categories on the device as well as the ones pushed to the device by panorama.

Highlighted
L4 Transporter

Re: Difference in URL block categories between panorama and device

Hi There,

Looks like Panorama booted up with the Surfcontrol Database and not the Brightcloud one.  Please use this command:

admin@Panorama> set system setting url-database brightcloud

You should then get the same categories.

Best Regards

James

Highlighted
Not applicable

Re: Difference in URL block categories between panorama and device

This has resolved my issue.  Thank you James.

Highlighted
Not applicable

Re: Difference in URL block categories between panorama and device

Is this the only command that needs to be issued in Panorama to convert and download the Brightcloud categories? Or is it like the firewalls where you activate Brightcloud then do a second step to download the database from Brightcloud.

Highlighted
Not applicable

Re: Difference in URL block categories between panorama and device

gmoerschel,

That is the only command required as there is no activation required on the Panorama appliance.  It is simply used so the URL filtering categories will match what has already been configured on the PA appliances.

Highlighted
L3 Networker

Re: Difference in URL block categories between panorama and device

I seem to recall we had some issues with the brightcoud database versions being out of sync between Panorama and the firewall as well, or am I imagining this? Brightcloud either changed the names of the categories or added/removed some of them at some point.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!