DotW: Update Checks
Resolution
In this week's Discussion of the Week (DotW), we're taking a closer look at a challenging question posted by Community member xandout about upgrading PAN-OS. Again, the Community rallies 'round and is able to offer some advice and workarounds.
Member xandout asks about update checks behaving strangely resulting in an upgrade failure.
Figuring out the root cause of these communication errors can be challenging and sometimes time consuming. Several users jumped in on the discussion providing some tips on what to look for in this situation:
- Are you able to resolve 'updates.paloaltonetworks.com?'
- How are you connecting to the update server?
- Are you using the management interface or are you using a service route?
- Is the traffic passing through the firewall ? If so, are you allowing this traffic?
You could also check for suspicious global counters if the traffic is passing through the firewall:
Tcpdump/pcap can also be your best friend. It allows you to verify what exactly is going on with the traffic:
How-To-Packet-Capture-tcpdump-On-Management-Interface
If time is an issue and you have none to troubleshoot communication issues, then community member pulukas suggested a nice workaround for this. Go to the support portal and download the software manually :
After downloading the file, you can upload it to your VM unit using the 'Upload' function:
Browse for the downloaded package on your computer and click 'OK' to upload it to your VM unit:
After uploading the file, install it like you normally would:
Follow the original discussion here: PA-VM-Update-Check-Fails