How to Manually Downgrade BrightCloud URL Filtering Database

Overview

There can be times that an admin will have to manually downgrade BrightCloud URL Filtering Database, this document explains how.

In this example, we will be downgrading to BrightCloud DB version 3.781 (seed file) from January 23rd 2012.

Steps

1. Locate the seed file on the Dynamic Updates page and download it.
2. Place the file on a machine that has an scp or tftp server available (FTP is not supported).
3. Once the file is placed in the proper location, move it onto your PAN from the CLI.
4. Either tftp or scp the file.  Note: this seed file is over 353MB so consider available bandwidth before attempting this procedure.
   • TFTP IMPORT METHOD

     admin@PA-500> tftp import signed-url-database from 172.17.10.50 file bcdb_3_781.enc

     mode set to octet

     Connected to 172.17.10.50 (172.17.10.50), port 69

     getting from 172.17.10.50:bcdb_3_781.enc to /tmp/cli.tmp.vbFMFt [octet]

     Received 369749040 bytes in 562.8 seconds [5255775 bit/s]

     uploaded_bc_db_full saved

   • SCP IMPORT METHOD

     admin@PA-500> scp import signed-url-database from pandivier@172.17.132.51:/home/pandivier/bcdb_3_781.enc

     pandivier@172.17.132.51's password:

     bcdb_3_781.enc                                100%  353MB   2.6MB/s   02:17

     uploaded_bc_db_full saved

5. Install the uploaded URL filtering database.

   admin@PA-500> request url-filtering install signed-database

   Installing URL database started..., please check pan_bc_download.log for progress

6. Tail the BrightCloud download log for progress updates.

   admin@PA-500> tail follow yes mp-log pan_bc_download.log

   Feb 04 09:37:28 Installing uploaded database...

   Feb 04 09:38:45 Max. entries: 385 at index 7361

   Feb 04 09:38:45 Time taken: 60

   Feb 04 09:38:54 URL filtering database was upgraded from version 3791 to version 3781 by the auto-update agent

7. You have now successfully downgraded your URL Database through a manual import!

owner: bvandivier