Hello I open case today; ================= According to your captures, we can see below information while running the global counter. url_db_request -------------- Number os URL database request url_request_timeout -------------- The url category request is timeout url_request_pkt_drop -------------- The number of packets get dropped because of waiting for url category request As per the resolution in KB below, please adjust the value of timeout. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClyeCAC#:~:text=By%20default%2C%20the%20DP%20will,there%20is%20a%20DP%20miss. Moreover, as this PA-5250 appliance subscribes to the license of ‘PAN-DB URL Filtering’, the mechanism of Palo Alto Firewall for layer 7 traffic is always enable the URL filtering to inspect the packets, this is function as designed. Thanks and please feel free to contact us if you need assistance.
... View more