PAN-DB URL Filtering activation problem

[DKanta]

Hi All!

i am trying to activate URL Filtering from PAN-DB, but i have problems.

I upload the license manually and i haven't error, but when i try to download the database this error appear:"URL database download: not available."

Then i do the "Retrieve license keys from license server", but this error appear:"Failed to fetch licenses. Failed to get license info. Please try again later."

The update server is correctly configured (updates.paloaltonetworks.com) and i tried to change the service rooute using external interface, but nothing changed.

Have you got any advice?

It is a PA-200 with PAN-OS 8.0.1

Regards,

Daniele

[TranceforLife]

Hi,

Are you trying to migrate from BrightCloud to PAN-DB?

> show system info

> show system setting url-database

Very useful link:

https://www.paloaltonetworks.com/documentation/60/pan-os/pan-os/url-filtering/troubleshoot-url-filte...

[DKanta]

Hi,

yes, i'm migrating from BrightCloud to PAN-DB.

Regards,

Daniele

[TranceforLife]

Try this guide:

https://live.paloaltonetworks.com/t5/Featured-Articles/From-the-Experts-Migrating-from-BrightCloud-t...

[DKanta]

Hi,

i think i have found the root of the issue: DNS querys goes aged-out.

Regards,

Daniele

[TranceforLife]

They will be aging out as it is UDP protocol.

can you ping from your firewall:

> ping host s0300.urlcloud.paloaltonetworks.com

Do you get resolution?

[DKanta]

hi,

no, the result is "host unknown"

Regards,

Daniele

[TranceforLife]

Can you ping any other host out the Internet? google.com

Do you use mgmt interface for DNS queries or another ?

[DKanta]

Hi,

i tryed to ping google, but the problem is with connectivity, even if i ping 8.8.8.8 don't work

Regards,

Daniele

[TranceforLife]

First make sure your Layers 1, 2 and 3 are good. So you can ping your default gateway or you can use your external interface ip in the service route options.