topic Re: Palo updates in General Topics

Palo updates

notleyhigh — Thu, 31 May 2012 13:41:31 GMT

I have just setup my Palo but it cant access any of the update servers, i have a security rule which is source trust zone des untrusted

my trusted zone is on a 10.x.x.x range

my un-trusted which connect to the isp router is a 213.x.x.x range,

Re: Palo updates

ttongfly — Thu, 31 May 2012 14:46:07 GMT

Hi notleyhigh.

PAN device would access update-server using MGT interface is default.

You should check that your MGT that access the internet or look up a DNS server that you configured or connect updates.paloaltonetworks.com.

Thanks.

Regards.

Roh.

Re: Palo updates

zarina — Thu, 31 May 2012 17:33:29 GMT

All the updates by default are through management interface unless you have configured a service route. If you are using the management interface, make sure it can reach the internet and also the DNS can resolve the updates.paloaltonetworks.com.

If you are using a layer 3 data plane interface, make sure it can reach the internet and can also resolve the updates.paloaltonetworks.com. To ensure pings are successful, enable ping using the management profile.

Re: Palo updates

notleyhigh — Thu, 31 May 2012 17:55:14 GMT

Got it fixed now move the management ip to local LAN and point it at the correct gateway.

Thanks

Mark

Re: Palo updates

mikand — Thu, 31 May 2012 20:06:59 GMT

No need to move the management to dataplane.

Instead go to Device -> Setup -> Services and click on Service Route Configuration and change so just the updates goes through that dataplane interface.