PAN URL DB not getting update.

[VishnuPS]

Hi Team,

I have 3 firewalls in my different loctions, All 2 firewall URL Update version is up to date. Only one firewall is a lower version. 

Also, I identified lower version firewall having a different update server when I checked the show url-cloud-info command.

lower version update cloud server is: pdx1prod.urlcloud.paloaltonetworks.com

The higher version update cloud server is: serverlist.urlcloud.paloaltonetworks.com.

Kindly help me out to resolve this issue.

[TomYoung]

Thanks @VishnuPS, This was my last post.

"This line (6th from bottom) looks like your issue. "curl error: Could not resolve host: s0000.urlcloud.paloaltonetworks.com"

Can you run the command 'ping host s0000.urlcloud.paloaltonetworks.com'? This will test DNS. The source address used will be your management interface.

Could you also run the command 'debug dataplane internal vif route 250' to verify that you do not have any service routes installed? The output should be blank. If not, please post."

Could you please run those commands?

Thanks!

[VishnuPS]

Hi Tom,

I'm able to ping host s0000.urlcloud.paloaltonetworks.com.

But still issue same.

[TomYoung]

That's disappointing.  It looks like we had a DNS error at one point.

Is this a single firewall or HA pair?

[VishnuPS]

Hi Tom,

Its a single firewall, anyway i have opened PA TAC case, I will update here once issue is get resolved. Thank you.

[VishnuPS · Accepted solution]

Hi Team,

Issue resolved and please find the TAC solution below,

1. The URL-filter elect the cloud server:pdx1prod.urlcloud.paloaltonetworks.com
2. And the response is very slow during
show url-cloud status
test url www.google.com /www.yahoo.com
3. Change the mgmt to 1400 make some improvement during certificate exchange on small ISP path MTU.
Then the cloud server change to serverlist.urlcloud.paloaltonetworks.com
test url and response better now
ISSUS fixed.

Thank you all

Regards,

Vishnu Ps.

[EdH]

Hello,

I have the same error in my System Log:  CURL ERROR: bind failed with errno 124: Address family not supported by protocol

I changed the Service URL:serverlist.urlcloud.paloaltonetworks.com

And I changed my MTU size to 1400 (1372+28) after confirming 100% of packets received at 1372 bytes  (no fragmentation) via ping www.google.com -f -l 1372.

I am still seeing the error above in my System Log...  Any other suggestions?

Thanks in advance.

/Ed