How to Install and Activate PAN-DB for URL Filtering

How to Install and Activate PAN-DB for URL Filtering

Created On 09/25/18 17:42 PM - Last Modified 02/19/21 03:21 AM

How to Install and Activate PAN-DB for URL Filtering

  • Any PANW Firewall
  • Any PAN-OS version


The Management Interface is used to connect to the cloud. Please ensure internet connectivity before you proceed.

  1. License the Palo Alto Networks device for PAN-DB and activate the license on the device.
    1. Navigate to GUI: Device > Licenses
    2. Click Retrieve license keys from license server or Activate feature using auth code
  2. Download the URL DB initial seed file optimized for a specific region:
    1. Navigate to GUI: Device > Licenses
    2. Click Download under the Palo Alto Networks URL filtering
  3. Once downloaded, activate the seed file. This will apply the PAN-DB and initiate a reset of the system.
    Note: Before clicking Activate, make sure any unsaved changes to the device configuration are committed to avoid losing any pending changes.

As part of the activation process, PAN-OS will also automatically migrate any existing URL filtering profiles to use the PAN-DB categories. This is done with an auto-commit in the background; no device reboot required.  Save your configuration before making any changes, and check URL filtering profiles and security policy.

The following information can be viewed in the system logs:

After the download:


After the activation:





Additional Information

Useful CLI Commands

>show system setting url-database
>request url-filtering download paloaltonetworks region <region-name>  (Does not apply to PAN-OS 9.0 and later)
>request url-filtering download status vendor paloaltonetworks         (Does not apply to PAN-OS 9.0 and later)
>set system setting url-database paloaltonetworks

Note1: In PAN-OS 9.0, the command "request url-filtering download"  only supports BrightCloud URL Filtering

Note2: BrightCloud was removed as a URL filtering vendor starting PAN-OS 9.1. Refer Documentation.  Consequently, the commands "request URL filtering download",  "request URL filtering revert" and "set system setting url-database" are also removed.

  • Print
  • Copy Link

Choose Language