PAN DB vs Advanced

[FWPalolearner]

Hello ,

Just want to know if PAN-DB and Advanced URL are different licensing

If Advanced URL is purchased , does it cover PAN-DB

We have a customer who puchased Advanced URL  , but not PAN DB

[SutareMayur]

Hi @FWPalolearner ,

Yes, the advanced URL filtering license covers access to PAN DB. No need to have separate license for PAN DB if you already have Advanced URL filtering license.

Hope it helps!

[FWPalolearner]

Ok .thanks.

Just small query.

When I click on objects tab and go to url filtering .

At the bottom it shows url filtering license expired . Is it normal ?

How can I check that pan db url actually works

[TomYoung]

Hi @FWPalolearner ,

Scroll down on this link -> https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resour... and you will see a table of the features in URL and Advanced URL filtering.  The 1st line, "URL filtering database" is PAN-DB.

A license expired message is not normal.  You may need to "Retrieve license keys from license server" under Device > License.

Yes, you can test URL categorization on the NGFW.  Use the "test url" command on the CLI -> https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClQcCAK.  On the bottom of the link it has special PANW URLs you can test for each category.

Thanks,

Tom

[FWPalolearner]

@SutareMayur  Thanks .

License part is clear , but i tried to retrive license key but no luck ;

below is the snapshot

Also ,when i go to objects TAB and click on URL filtering , i see below 

[TomYoung]

Hi @FWPalolearner ,

That is very strange.  I have the Advanced URL Filtering license, and my license page shows the Advanced and PAN-DB good.  I guess you need to open a TAC case.  Thanks for the pics!

Thanks,

Tom

[FWPalolearner]

@TomYoung  I deleted the PAN_DB license key via CLI

Now i cant see PAN DB license ; and only see Advanced License which is valid

I tried request license fetch .

On the URL Filtering TAB i see below now 

The FW however shows PAN DB is good

(active)> show url-cloud status

PAN-DB URL Filtering
License : valid
Current cloud server : serverlist.urlcloud.paloaltonetworks.com
Cloud connection : connected
Cloud mode : public
URL database version - device : 20211130.20072
URL database version - cloud : 20211130.20072 ( last update time 2021/11/30 05:44:05 )
URL database status : good
URL protocol version - device : pan/2.0.0
URL protocol version - cloud : pan/2.0.0
Protocol compatibility status : compatible

I want to get rid of GUI error showing "License Required for URL filtering to Function"

[TomYoung]

Hi @FWPalolearner ,

Good news!  Excellent work.  Try making a change and committing to see if the GUI error goes away.

Thanks,

Tom