URL categories not being resolved

[BTS_MS]

Hi,

Our PAN 2020 is setup for URL filtering. After a reboot  we're now getting excessive matches for the "unknown" category. It appears URLs are not looked up on "Dynamic DB" and "Cloud DB".

Ex:

(active)> test url www.nds.org.au

www.nds.org.au society (Dynamic db)

(active)> test url-resolve-path www.nds.org.au

URL www.nds.org.au, category unknown

As per instructions from previous threads I've tried to remove www.nds.org.au from the URL cache:

(active)> clear url-cache url www.nds.org.au

This command requires the Palo Alto Networks URL filtering database.

What does the "This command requires the Palo Alto Networks URL filtering database." mean?  We are running URL DB version 3933 and FW says it is the latest update.

Many thanks for any direction on resolving this issue.

[mikand]

And the license is not expired?

[sraghunandan]

Hello,

Make sure that dynamic url filtering is enabled.

The Following command is not readily available until the next major release:-        

> clear url-cache url.

The available commands are > clear url-cache all

>delete dynamic-url host all

(This will clear dynamic database cache)

and retry the above test commands.

If this still persists open a case with support to assist you further.

Thank yuou.

Subijith Raghunandan.

[BTS_MS]

Hi all,

Thanks for the suggestions. We have dynamic filtering enabled. License is well and truly current. We've already tried the "clear url-cache" which didn't help. We've now logged a case with support.

Thanks.

[BTS_MS · Accepted solution]

As per TAC's instructions we had to revert to a earlier version of the URL database (then clear cache). We've then upgraded back to the current version. So far it is behaving correctly.

[millfieldschool]

in the last two recent updates palo and birght cloud are having issues and its causing alot on not-resolved results for sites that are normally ok. its getting annoying as we have to wait half a day or more for aplo/brightcloud to fix the problem. not what you expect for the kind of money you have to pay for it. I think palo need to look at a new company instead of bright cloud as they are not that great on url calssification always having to submit misclasified ones. we have had Palo for a year now and concidering looking at a new filtering alternative. never had issues light this when we had websense. the thing that is anoying you cannot contact palo direct you have to go through a partner for issues and then you find there knowledge is limited.

darren

[LCMember2860]

Brightcloud were completely down for several hours this morning - no URLs that had to be sent to the cloud db were resolving and I couldn't even look up URLs on their website (in the end we had to allow the "not-resolved" category to restore level of service to our users).  Its supposed to be a distributed cloud based solution, I'm not impressed that they can suffer such a major failure.

[millfieldschool]

it was the same last week they had issues as well. and its taking them most the morning to resolve them both times. not great at all and no one seems to give you any information why. or palo does not alert end users that they have issues with there updates or that services are down.

[kalyanram.piratla]

Millfield School,

Latest update at this point is:

Brightcloud servers are up and running.  Can you please upgrade to the latest URL database version and clear up the URL cache and give it go.  Hopefully, everything should fall in place. 

[kalyanram.piratla]

Millfield School,

I have just realised that version 3956 has been released.  Can you please upgrade and check the URL categorization now.

The one website that you had emailed me a while back is now being classified as business and economy (Cloud dB) on version 3955.  I am very hopeful that you're issues should be sorted out with version 3956.

Regards,

Kalyan