Difference in URL block categories between panorama and device

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Difference in URL block categories between panorama and device

Not applicable

I have 2 PA-2050 being managed by panorama, all running 3.1.6.  I am using the brightcloud url filtering service we paid for and both devices are up to date.

When I do a commit all from panorama it shows "commit all succeeded", however when I check the details of the commit I get a list of messages similar to "member arts is an invalid reference".

I can see that the URL block categories on the devices are obviously different than those listed in the panorama URL filtering security profile in panorama.  I didn't find anything in the admin guide or the release notes.

Can anyone explain this anomoly?

I have attached an image of the default URL block categories on the device as well as the ones pushed to the device by panorama.

5 REPLIES 5

L4 Transporter

Hi There,

Looks like Panorama booted up with the Surfcontrol Database and not the Brightcloud one.  Please use this command:

admin@Panorama> set system setting url-database brightcloud

You should then get the same categories.

Best Regards

James

This has resolved my issue.  Thank you James.

Is this the only command that needs to be issued in Panorama to convert and download the Brightcloud categories? Or is it like the firewalls where you activate Brightcloud then do a second step to download the database from Brightcloud.

gmoerschel,

That is the only command required as there is no activation required on the Panorama appliance.  It is simply used so the URL filtering categories will match what has already been configured on the PA appliances.

I seem to recall we had some issues with the brightcoud database versions being out of sync between Panorama and the firewall as well, or am I imagining this? Brightcloud either changed the names of the categories or added/removed some of them at some point.

  • 4331 Views
  • 5 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!