5 second delay on some web requests due to URL filtering

Symptom:

Web requests may see a 5 second delay on each HTTP request (dependent on URL), from when the query (GET, POST, etc) is sent before any data is received by the client.

Problem:

When ‘Dynamic URL filtering’ is enabled (default setting), if the “database.brightcloud.com” service is unresponsive or unreachable, the Palo Alto will keep trying to contact the database for 5 seconds before giving up.

This 5 second delay happens for EVERY url that is not found in the base database stored locally on the Palo Alto.

Solution:

Disable ‘Dynamic URL filtering’ option for the URL filtering profile.

Or correct the issue which is preventing access to the database.brightcloud.com service.

Was this article helpful?

Related Articles

Leave A Comment?

You must be logged in to post a comment.