how to disable the url-cloud-connect

[Felixcao]

the customer firewall pa3220,version :10.2.1, the mgt interface could not access internet,so that firewall could not upgrade the url database.

but the system log dispaly some high log:url-cloud-connect-failure,the customer want don't see these log.

first solution：delete the PAN_DB_URL_Filtering key

Are  there any  good  other solutions？

[aleksandar.astardzhiev]

Hey @Felixcao ,

Out of curiosity, but why your customer don't consider using the URL filtering license that he already have paid for?

Does the firewall have Internet access through any of the dataplane interfaces - if yes you can use it for reaching the URL DB cloud with service routes = https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/service-routes

PAN FW support enabling proxy for traffic to Palo cloud, it may be an option if the mgmt does not have direct internet access.

If you remove the URL filtering license, but still use URL filtering profile anywhere in the policy you may start receive warning messages when committing the policy - which are a lot more annoying.

Another question - does your customer don't want to see those logs forwarded to his external log collector or he does not want them on the firewall at all.

[Felixcao]

Hi: on 9.1 version ,the firewall have one follow cli

delete deviceconfig system update-schedule url-database

but on 10.2 version i could not find same cli，Is there no such function, or use other cli ？

[spedersen]

Hi Felixcao,

Did you find a solution? I have a customer with the same issue.