Does this help answer your question? Management plane cache: The seed database is placed into the management plane (MP) cache to provide quick URL lookups. The MP cache will pull more URLs and categories from the PAN-DB core as users access sites that are not currently in the MP cache. If the URL requested by a user is “unknown” to Palo Alto Networks, the URL will be examined, categorized, and implemented as appropriate. Source: https://researchcenter.paloaltonetworks.com/2014/10/web-security-tips-pan-db-works/
... View more