In a non-internet-connected environment, it is possible for Panorama to not have its own support license loaded. As Panorama presently must contact the Palo Alto Networks support server to obtain or update its support license, Panorama will not be able to contact the support site.
Symptom
This results in the inability to upgrade Panorama’s PAN-OS. Subsequently, an up-to-date all contents file will not install on Panorama, and the PAN-OS upgrade will fail with a content error message.
Attempting to install an all contents update will fail as well. This is due to the nature of the all contents file containing license-protected content (paid content updates like Threat and Wildfire updates). Even if Panorama support is in a paid/current status, the absence of a support license on Panorama will still cause failures. This results in Panorama’s PAN-OS not getting updated.
Workaround
While the support license is not loaded on the Panorama, software and content downloads from the update server will fail, manually downloaded packages can be uploaded and installed on Panorama. Manually uploading and installing the appropriate all-content update will then enable a manually uploaded PAN-OS to be installed.