It sounds like you are using 2 different URL databases. Most likely, the firewall is using Brightcloud and Panorama is using Surfcontrol, but one may be using paloaltonetworks (pandb). You can verify this by executing the command on both devices: show system setting url-database You will want to verify which URL DB you are licensed for from the Device tab > Licenses page, then set the correct db on both devices, if needed, with the following command: set system setting url-database {brightclooud | pandb} Ben
... View more