Issues again with Brightcloud Services

[kalyanram.piratla]

On the 12th of November 2012, I am having issues again with Brightcloud not resolving websites from the cloud dB.  This has happened in the month of October 2012 as well.  The Brightcloud services cannot receive data as well.  All connections look absoutely fine and this just started happening out of the blue.

This is also happening across all my customers causing serious issues...

Can someone from PAN please let us know what is happening with a reason this time...and can this please be looked into ASAP...

Many Thanks

Kalyan

[pandragon]

It may be due to some Internet connectivity issue at your site. I checked using CLI command from one of the PaloAlto firewall as follows.

request url-filtering download status vendor brightcloud

And it shows result as follows.

Nov 12 01:02:29 URL filtering database version 3979 is already the latest version

[kalyanram.piratla]

Shashank,

I agree you are running version 3979 and so am I.  Before posting, I did check using the same command and the GUI also shows the same information.  The update for URL Filtering was done at 02:45am GMT on the 12th of November to version 3979. 

The issue of "not-resolved" started popping up somewhere around 11:30am GMT on the 12th of November.

Can you please do a "check now" under your Dynamic updates and then check what log do you see under System logs for URL Filtering?  I continue to see the following:

Please let me know what you see...

Cheers..

K

[pandragon]

Tried "Check Now" under Dynamic updates and it did not gave any error. system log also did not show any recent error for brightcloud.

[kalyanram.piratla]

This is weird... I did cross check all my connections and they all absolutely fine.  I would have thought something might be wrong at my end if it was just me... but I am a good amount of customers complaining...

Any commands that I can use to re-initate the connection with brightcloud database... what can I do to resolve this issue then..??

Help on this is very much appreciated...

Cheers..

[JanisM]

I'm getting the same error, but i still have to check some things before starting to point with fingers (i got new machine, had to move config from old one and all is not as it should be in dynamic updates, but that should be fixed tomorrow)

[kalyanram.piratla]

Janis - Any luck..??

[dyang]

Hi everyone,

I'm not aware of any BrightCloud service issues at this time, but I'll double check just in case.  May I ask what part of the world you are located?

Thanks,

Doris

[kalyanram.piratla]

Doris,

United Kingdom is where I am located... and I just did a check now under dynamic updates and this is what I see in the system logs (not just me but some customers of mine as well)

I have also put in a rule allowing service.brightcloud.com; database.brightcloud.com and updates.paloaltonetworks.com for ports 80 and 443 (just to check) for no luck...

Cheers...

Kalyan

[kalyanram.piratla]

Any luck or news on this..??

[hvcomputech]

My system log also shows: "Cannot receive data from 'service.brightcloud.com:80' to download BrightCloud URL database 11/13 09:16:49" and I'm in the USA.

[kalyanram.piratla]

PAN:  Guys any update on this..?? There are some serious issues happening here in the UK as the firewall cannot receive data from brightcloud, thereby websites that query the cloud for categorization isn't working and most of them are being categorized as not-resolved and I can't afford have the category not-resolved set to allow...!!!

An update on this will be appreciated..

Cheers..

[jsykora]

It appears that somewhere along the line Brightcloud was added as its own AppID entry.  This caused us issues until I noticed that brightcloud traffic was being blocked because we weren't specifically allowing traffic for that App.  This appears to have been a recent change?

[mikand]

If your updates goes through mgmt-interface you shouldnt need to define such security policy on the box having problems to retrieve the updates. However this PA box perhaps sits behind another PA box (which then of course this second box must have such security rule).

[dyang]

Yes, we published the BrightCloud App-ID a few weeks ago.  For those of you experiencing issues, can you verify whether or not this is the cause of the problem?  In the meantime, our support team is troubleshooting with BrightCloud - I'll keep you posted as I get new information.