URL DB recategorization

[tiwara]

Hello ,

We are currently using Panorama 5.0.11 Version .

Most of the website is blocking due to this version .

We have already requested brightcloud to recategorized the URL to new one .

But still we are facing the issuue.

Like widma.com coming to Adult and porn category .

Also how to clear the URL cache via CLI.

[jburugupalli · Accepted solution]

Hello Tiwara,

I have done quick test on my test PA box for URL widma.com which is categorized as business-and-economy

> test url widma.com

widma.com business-and-economy (Base db)

you can clear URL cache on your Palo Alto device to assist in making sure the category is reflected correctly

> clear url-cache all

> delete dynamic-url host name widma.com

Please make sure that you've updated Bright-cloud to the latest version 4261.

Regards,

Jahnavi

[mbutt]

Hi Tiwara,

PanOS version has nothing to do with blocking of the URL. Each individual firewall will have dynamic update section. You need to make sure that you are updating the URL database on regular basis. Here is a link of doc that explains on the setup and automatically updating it.

How to Activate the BrightCloud URL Filtering Service

other than that, if you are looking to understand How Panorama Retrieves BrightCloud Updates. The following document can explain you that

How Panorama Retrieves BrightCloud Updates

However if you are seeing a different result when you are testing the URL from CLI and actual category. Following document explains it

Discrepancy When Using the Test URL command

And the following documents explains how to clear the url cache

How to Clear URL-cache using BrightCloud for URL filtering

Hope this helps in resolving the issue.

Thank you

Numan

[tiwara]

Hello All,

Thanks its working after clearing the cache.

[panos]

Just to remind

you can configure the timeout value from Device.It is 168 hours by default.

[tiwara]

Hello ,

No it still 168 Hrs.

Any advise for the setting .

The above issue has been resolve after manually clear the cache .

[jburugupalli]

Hello Tiwara,

Cache is cleared completely when the "dynamic url cache timeout"  timer expires ,you can change it to 24 hours instead of 168 hours ( 7 days ) default. This value is used to determine the length of time an URL entry can remain in the cache after it is from the URL filtering service.

Dynamic URL cache timeout value is used when the setting "Dynamic URL Filtering"  is enabled on URL filtering profiles which will access the Bright-cloud database in the cloud for the latest categorization information. Otherwise, the URL filtering engine will only check for categorization on-device cache.

More information on URL categorization can be found here: URL Categorization Components and Process

Regards,

Jahnavi.

[tiwara]

Hello Jahnavi,

Thanks for the update .

We have update the "dynamic url cache timeout" to 24 Hrs .

[kairoosto]

Hello, I have a problem, I try to open a URL in my organization URL www.encuestas-colsubsidio.com and it blocks me because it is in the category of financial, I would like to know which category to select for URLs to find and recategorize in PA DB.