Error Message "License Required for URL Filtering to Function"
25027
Created On 10/04/21 19:08 PM - Last Modified 08/25/22 15:20 PM
Symptom
GUI message "License Required for URL Filtering to Function " when trying to configure url filtering after installing only the Advanced url license with no PAN-DB URL license installed on the device
Environment
- Palo Alto Firewall with Advanced URL Filtering License
- PAN-OS Versions 9.1, 10.0, 10.1, 10.2
Cause
Known issue, see PAN-178194
PAN-OS 9.1.14 Known Issues (paloaltonetworks.com)
PAN-OS 10.0.11 Known Issues (paloaltonetworks.com)
PAN-OS 10.1.0 Known Issues (paloaltonetworks.com)
PAN-OS 10.2.2 Known Issues (paloaltonetworks.com)
Resolution
Workaround
For now the following should be noted:
- GUI message "License required for URL Filtering to function" is not impacting URL filtering functions.
- For the Inline ML options being grayed out on the GUI for this there is a workaround available that can be executed via CLI with the below commands:
> configure
# set profiles url-filtering Test mlav-engine-urlbased-enabled "Javascript Exploit Detection" mlav-policy-action block
# set profiles url-filtering Test mlav-engine-urlbased-enabled "Phishing Detection" mlav-policy-action block
# commit
- To add an exception in the same tab under "Inline ML"
- Create custom URL Category, Tab Objects > Custom Objects > URL Category > Add >
-
To add this custom URL Category under Inline ML > Exception,
> configure
# set profiles url-filtering Test mlav-category-exception new_created_custom_url_category_name
# commit