About dyang

Hi Dieter, Thanks for your post!  PAN-DB does require a separate license from BrightCloud, and there is no official migration of licenses between the two.  Please speak with your sales representative to see what their policy is regarding this.  Regardless of what answer you find from your sales representative, you are always welcome to purchase and apply a PAN-DB license before your BrightCloud license expires (or vice versa).  Should you do this, the process of activating the new license will migrate any existing policies to the new vendor. Hope this helps, Doris ... View more

Hi Terry, There is no URL database that is downloaded on Panorama, which is why the version shows up as "0" and why there is nothing in the dynamic updates section.  The database itself is downloaded directly to the managed devices, and you can use Panorama to set URL filtering policies and push to managed devices. Hope this helps, Doris ... View more

You cannot modify the severity level of any of the syslog messages, as those are pre-set.  ... View more

Hi JR, The "not-resolved" category means that your data plane has not received an answer from the management plane/BrightCloud server in the set timeout period (default of 5 seconds).  This could either mean that the BrightCloud servers are down, an issue with your network connection (for connecting to the BrightCloud servers), or something else between the data plane and management plane.  Since this was working for you before, I'm assuming there's nothing wrong with your network connection.  BrightCloud has not reported any server outages in the last few days, so I suspect that there may be something else going on with your device.  If you haven't already, please open a ticket with Support so that we can further troubleshoot. Thanks, Doris ... View more

Hi Andrei, We do indeed have some limitations in terms of what patterns you can use for custom data patterns - there is a 7 byte minimum requirement, and we do use a modified "regex" for pattern creation.  If there is a pattern that you'd like to create but are limited by our restrictions, please feel free to contact your SE for a possible feature request.  In terms of the pre-defined patterns, PAN-OS will perform some additional checks in place to prevent false positives.  For example, the Luhn algorithm is used to validate credit card numbers, and there are also certain rules to determine valid Social Security numbers. Hope this helps, Doris ... View more

In the absence of a URL filtering license, you should also be able to create a custom category.  So if you really need to, create a custom category with the URL you'd like to block, and then continue using the block list to alert on the rest. ... View more

The URL filtering engine will log all GET requests, assuming that you have a URL filtering profile minimally set to "alert" for that category.  That said, depending on the "log container page only" setting, we may only log URLs of a specified content type.  This feature is meant to reduce the number of logs that are generated (mostly images and other code that you may not find useful).  If, however, you do want everything logged, simply disable container page logging.  As mentioned in sdarapuneni's post, if you've enabled container page only, it will only log URLs of the specified content-type.  So for example, if you set container pages to only content type image/gif, then in your example above, you would only see log entries for the .gif files.  ... View more