URL category displaying "not-resolved" for all the URLs after import of device state.

10048

Created On 07/20/20 13:31 PM - Last Modified 06/27/24 20:38 PM

URL Category

URL Filtering Log

URL Filtering

PAN-OS

Symptom

The device state was exported by using 'export device state'
Later the same device state was imported using 'import device state'
Now all the URLS for every URL category is displaying "not-resolved"

Environment

Palo Alto Firewalls
Supported PAN-OS
Device State import
URL Category

Cause

URL database is not initialized properly.

Resolution

Check the cloud status using the command "show url-cloud status"

> show url-cloud status
PAN-DB URL Filtering
License : valid
Current cloud server : serverlist.urlcloud.paloaltonetworks.com
Cloud connection : connected
Cloud mode : public
URL database version - device : 20200717.20004
URL database version - cloud : 20200717.20004 ( last update time 2020/07/16 20:14:42 )
URL database status : good
URL protocol version - device : pan/2.0.0
URL protocol version - cloud : pan/2.0.0
Protocol compatibility status : compatible

The URL database version displayed above is the latest but the last update time is old. This may vary depending on the date and time the command is run.

To re-elect the cloud server and initiate the connection.

>debug device-server pan-url-db cloud-reelect
re-elect to cloud triggered.

Initiate the url-filtering upgrade process

> request url-filtering upgrade
URL filtering database update initiated

Validate the resolution

> debug dataplane test url google.com
URL google.com/, category is not-resolved, a request was sent successfully to the host

> debug dataplane test url google.com
URL google.com/, category  search-engines, low-risk,

You might see it as not-resolved at first as it did not have a cache. Wait for a few seconds and check again. The URL will resolve to the right category.

Additional Information