error while updating the brighcloud DB

[u3974]

hi,

during the update process of the webfilter DB am getting the following error error in SSL_read() call ?

while i can downlod the aapp-threat prevention.

[arnaud_b]

Hello Feras,

Did you activate the proxy connection for the management?

If it's true, do not activate the control A/V for the URL updates.paloaltonetworks.com on the proxy. Exclude this URL for the proxy

What are the steps you realized for the activation of Brighcloud?

Regards,

Arnaud

[u3974]

well i dont have a proxy in my network , its direct connection to the internet , if that what u mean .

and for activating the brightcloud i did it from the site under my devices then from the appliance under Device-license-Retrieve license keys from license  server

am i missing anything here ?

[arnaud_b]

Ok.

Did you realize the following cli command:

# request url-filtering upgrade brightcloud

you can check the status with this cli command:

# request url-filtering download status

or in the logs # tail mp-log pan_bc_download.log

Do you have an error message after it?

You must to wait the download of the entire database. after it, you will activate the url filtering in the webui on the menu 'licences"

Regards,

Arnaud

[u3974]

yes am getting this error from the CLI only as i tried these commands before posting here .

[u3974]

Sep 24 13:07:25 Failed to download 'full_bcdb_3.443.bin'
Sep 24 13:07:25 Error: pan_bc_download(pan_bc_url.c:1200): Failed to perform download and update
Sep 24 13:07:25 Error downloading latest URL database
Received header HTTP/1.1 200 OK
Content-Length: 363533308
Server: Microsoft-HTTPAPI/2.0
Date: Thu, 23 Sep 2010 09:26:08 GMT


error in SSL_read() call

[arnaud_b]

Could you paste the result of cli command # show system info

It's just to check your version of PAN OS and apps version.

Regards,

Arnaud

[arnaud_b]

It's strange, it's looks like an issue with a previous integration. The problem was an equipment analyzed the traffic and did some actions.

Verify if you have a IPS / IDS or an another equipment analyzing the traffic http or https.

[u3974]

ok i`ll check that and update with the resault

[arnaud_b]

hi,

Do you fix your issue or find a workaround?

Arnaud