URL filtering issue.

[Satish]

Hi Friends,

i am facing one issue with url Filtering my site category is showing malware- sites but when ever i am trying to check with ( https://urlfiltering.paloaltonetworks.com/testasite.aspx ) its showing travel category. please suggest.

[HULK]

Hello Satish,

Both PAN-DB and Bright-cloud is categorizing as  "travel". Hence, i would suggest you to clear the URL cache from you PAN firewall.

> clear url-cache url <URL>

> delete dynamic-url host name

> test url  mytravelaffairs.com

A similar doc for your reference: How to Handle a URL Miscategorization

Hope this helps.

Thanks

[Satish]

Hi Hulk,

Thanks for reply. i will do this and get back to you.

Regards
Satish

[HULK]

Sure :smileygrin:. Take your time and let us know the result.

Thanks

[Satish]

Hi Hulk,

please find the result,

# clear url-cache url www.mytravelaffairs.com - This command requires the Palo Alto Networks URL filtering database.

# delete dynamic-url host www.mytravelaffairs.com – invalid syntax and tried with following command

delete dynamic-url host name www.mytravelaffairs.com

# test url  mytravelaffairs.com – detected as travel in dynamic db but page is again blocked by malware-site

Regards

Satish

[HULK]

Hello Satish,

Could you please try to remove cache from the data-plane: > clear url-cache all

It looks the data-plane still having the wrong mapping.

Thanks

[sbabu]

Hi Satish,

Execute the below commands.

1) clear url-cache all

2) delete dynamic-url host all

Regards,

Sarath

[Satish]

Hi HULK & sbabu,

Client have brightcloud url filtering licence. and when i have check test url www.mytravelaffairs.com showing Cloud DB. I need to for the same base DB.

Please suggest, i have done all possible ways to resolve but till i am facing same issue.

Regards

Satish

[HULK]

Hello Satish,

The PAN firewall will check the URL category in below mentioned sequence:

DP > MP > Cloud-DB

So, if that URL is not available with DP/MP, then it will send a query to the cloud. There is a process running on the management-plane ( devsrvr- Device server), which is responsible for URL response.. Could you please restart that process and let us know the result.

> debug software restart device-server

(Wait for 5-10 mins and do the test)

Thanks