I have 2 PA-2050 being managed by panorama, all running 3.1.6. I am using the brightcloud url filtering service we paid for and both devices are up to date.
When I do a commit all from panorama it shows "commit all succeeded", however when I check the details of the commit I get a list of messages similar to "member arts is an invalid reference".
I can see that the URL block categories on the devices are obviously different than those listed in the panorama URL filtering security profile in panorama. I didn't find anything in the admin guide or the release notes.
Can anyone explain this anomoly?
I have attached an image of the default URL block categories on the device as well as the ones pushed to the device by panorama.
Looks like Panorama booted up with the Surfcontrol Database and not the Brightcloud one. Please use this command:
admin@Panorama> set system setting url-database brightcloud
You should then get the same categories.
Is this the only command that needs to be issued in Panorama to convert and download the Brightcloud categories? Or is it like the firewalls where you activate Brightcloud then do a second step to download the database from Brightcloud.
That is the only command required as there is no activation required on the Panorama appliance. It is simply used so the URL filtering categories will match what has already been configured on the PA appliances.
I seem to recall we had some issues with the brightcoud database versions being out of sync between Panorama and the firewall as well, or am I imagining this? Brightcloud either changed the names of the categories or added/removed some of them at some point.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!