topic Re: question about panorama and proxy server in Panorama Discussions

question about panorama and proxy server

miaocongcong — Mon, 11 Jul 2022 04:13:16 GMT

Hi，Bro The customer's network environment does not have direct access to the Internet, but wants panorama to update the contents and software of the managed firewall device through a proxy server. So the proxy server is configured to allow access to updates.paloaltoneytworks.com. We found that only updates.paloaltoneytworks.com is released on the proxy server, and panorama cannot obtain the license of the managed firewall, so it is impossible to update the contents and software of the managed firewall through panorama. what other domain names should be allowed ？

Re: question about panorama and proxy server

PavelK — Mon, 11 Jul 2022 06:09:14 GMT

Thank you for the post @miaocongcong

while "updates.paloaltonetworks.com" should be enough to fetch license, below domains are still required to allow downloads through proxy or 3rd party device:

proditpdownloads.paloaltonetworks.com
downloads.paloaltonetworks.com

Here is a reference: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/software-and-content-updates/content-delivery-network-infrastructure-for-dynamic-updates

If after adding these domains, the error is still presented, I would start looking into logs: less mp-log configd.log

Kind Regards

Pavel