topic Re: Software failed to fetch the PANOS from server in General Topics

Software failed to fetch the PANOS from server

FarhanKoujalgi — Wed, 01 Dec 2021 17:49:29 GMT

Hey guys hope you doing well One of my customer have an issue to fetch PANOS version.

PA-220 Current version 10.0.0

The dynamic updates are not up to date as i see the latest dynamic updates installed on her firewall are month of april 2021.

Also i am not able to fetch the latest PANOS.

I checked the service route and policy for PANOS upgrade.

Also check the internet through CLI by pinging

Also the device certificate also not able to fetch in his firewall.

I attach the image of device cert pls help me

Threat,support and wildfire license are valid.

Re: Software failed to fetch the PANOS from server

LAYER_8 — Wed, 01 Dec 2021 19:13:46 GMT

What update server is the MGT port configured to look for? updates.paloaltonetworks.com?

The DNS address configured in the management interface, can you confirm that from the MGT plane (ssh into the box) 'ping host x.x.x.x' is able to reach DNS out?

Re: Software failed to fetch the PANOS from server

BPry — Thu, 02 Dec 2021 04:14:39 GMT

@FarhanKoujalgi,

As @LAYER_8 mentioned you need to double check the basics. Does this customer use the management interface or have service routes configured? Is it capable of resolving FQDNs, have you verified that the firewall isn't resetting any of the traffic via the firewall's logs? The base image for PAN-OS 10.0 definitely had issues, but not being able to download updates wasn't one of them.

If everything looks good from a traffic and setting standpoint, then I would just upload 10.0.8 and manually install it and see if that fixes the communication issue you are seeing. I wouldn't expect it to, but its worth a shot if you think your configuration isn't the issue.