topic Re: PA 440 dynamic updates in General Topics

PA 440 dynamic updates

S.Byrne — Wed, 14 Feb 2024 23:06:36 GMT

I am installing a PA 440 v 10.1

I can ping IP Addresses on the Internet using my internet interface as source

I can https inbound to the firewall after configuring a management profile

under Device -> dynamic update or license check my attempt at the connection times out

Q can anyone recommend tests for me to complete to troubleshoot this issue ?

I had packet capture running but after selecting check for updates I did not see any connection initiated from the PA 440

Re: PA 440 dynamic updates

JayGolf — Wed, 14 Feb 2024 23:53:58 GMT

Hi @S.Byrne ,

For a new device, I would double-check the initial config and verify management interface settings (Device -> Setup -> Interfaces -> Management) as well as DNS settings configured (Device -> Setup -> Services).

Once those settings look good, run a connectivity test on the management interface to the updates server:

ping host updates.paloaltonetworks.com

If connectivity from management looks good and you still cant pull updates, verify firewall registration has been completed and auth codes have been activated.

Re: PA 440 dynamic updates

PavelK — Thu, 15 Feb 2024 04:41:30 GMT

Hello @S.Byrne

from your post I understand you took packet capture on management interface. Could you confirm that Dynamic Updates are indeed set to use management interface and not data plane interface: Setting a Service Route for Services to Use a Dataplane's Interface from the Web UI and CLI.

Kind Regards

Pavel