Palo Alto Networks Knowledgebase: Error Downloading URLs after Migrating from BrightCloud to PAN-DB

Error Downloading URLs after Migrating from BrightCloud to PAN-DB

2936
Created On 02/07/19 23:37 PM - Last Updated 02/07/19 23:37 PM
URL Filtering
Resolution

Issue

After migrating from BrightCloud URL filtering to PAN-DB licensing, the following syslog alert generates if activation of PAN-DB is not completed as expected:

domain: 1

receive_time: 2013/09/23 02:32:22

serial: 0003C102490

seqno: 85568

actionflags: 0x0

type: SYSTEM

subtype: url-filtering

config_ver: 0

time_generated: 2013/09/23 02:32:22

vsys:

eventid: url-download-failure

object:

fmt: 0

id: 0

module: general

severity: medium

opaque: PAN-DB cloud list loading failed (ERROR:Couldn't resolve host name).

 

A license on the Palo Alto Networks device can be valid, yet the issue persist due to a lack of a valid PAN-DB seed file.

PAN-DB URL Filtering

License : valid <==============

Cloud connection : not connected <===============

URL database version - device : 2013.03.11.106

URL database version - cloud : 2013.09.19.120 ( last update time 2013/09/20 16:10:48 )

URL database status : out of date

URL protocol version - device : pan/0.0.2

URL protocol version - cloud : pan/0.0.2

Protocol compatibility status : compatible

 

Resolution

  1. Verify that the DNS resolves properly.
    > ping host google.com
    PING google.com (74.125.239.105) 56(84) bytes of data.
    64 bytes from nuq05s01-in-f9.1e100.net (74.125.239.105): icmp_seq=1 ttl=55 time=3.05 ms
  2. Verify that the Palo Alto Networks device clock is current.
    > show clock
    Wed Oct  9 03:14:01 JST 2013
  3. Reactivate PAN-DB under licenses and download the seed file.
    10-8-2013 6-34-29 PM.png
  4. Verify PAN-DB is 'active' and no errors are received upon activation.
    > show log system direction equal backward receive_time in last-15-minutes

Time                Severity Subtype Object EventID ID Description

===============================================================================

2013/10/08 18:35:25 info     general        general 0  Session for user admin via Web from 10.30.5.254 timed out

2013/10/08 18:35:25 info     general        general 0  User admin logged in via CLI from 10.30.5.254

2013/10/08 18:35:24 info     general        auth-su 0  User 'admin' authenticated.   From: 10.30.5.254.

2013/10/08 18:33:11 info     url-fil        downloa 0  PAN-DB was downloaded successfully           

2013/10/08 18:33:11 info     url-fil        downloa 0  PAN-DB download: Finished successfully.      

2013/10/08 18:32:14 info     general        general 0  User admin logged in via Web from 10.30.5.254 using https

2013/10/08 18:32:14 info     general        auth-su 0  User 'admin' authenticated.   From: 10.30.5.254.

2013/10/08 18:30:17 info     general        general 0  Session for user admin via CLI from 10.30.5.254 timed out

2013/10/08 18:30:17 info     general        general 0  User admin logged in via CLI from 10.30.5.254

2013/10/08 18:30:17 info     general        auth-su 0  User 'admin' authenticated.   From: 10.30.5.254.

 

> show url-cloud status

PAN-DB URL Filtering

License :                          valid

Current cloud server :             s0200

Cloud connection :                 connected     <<<<==============

URL database version - device :    2013.10.07.148

URL database version - cloud :     2013.10.07.148  ( last update time 2013/10/08 18:37:55 )

URL database status :              good

URL protocol version - device :    pan/0.0.2

 

> test url yahoo.com

yahoo.com internet-portals (Base db) expires in 93000 seconds

yahoo.com internet-portals (Cloud db)

 

owner: rkalugdan



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm5PCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language