topic Re: Cannot update software since upgrading to 4.1 in General Topics

Cannot update software since upgrading to 4.1

devere — Tue, 03 Jan 2012 11:31:34 GMT

Hello all,

I recently upgraded to the 4.1 OS from 4.0.1. The firewall settings are fine but for some reason whenever the firewall tries to download any new software like 4.1.1, GlobalProtect, Dynamic Updates it keeps getting the error "Failed due to network failure".

I have checked and made sure that the Managment Interface is not being blocked by URL or Security policies. I even see successful connections to update server but the error still keeps coming up.

Any thoughts?

Regards

Stephen

Re: Cannot update software since upgrading to 4.1

rmonvon — Tue, 03 Jan 2012 20:21:44 GMT

From the CLI, test by issuing command 'ping host updates.paloaltonetworks.com'.

Also when you go into Dynamic Updates and Software, do you get any error when you click on 'Check Now' button?

Re: Cannot update software since upgrading to 4.1

devere — Tue, 03 Jan 2012 20:40:59 GMT

I can ping successfully from CLI and I get the same error when I manually press Check Now for any download.

Re: Cannot update software since upgrading to 4.1

rmonvon — Tue, 03 Jan 2012 21:08:52 GMT

Can you doublecheck the device's mgmt setting to ensure the update location is pointing to updates.paloaltonetworks.com?

Re: Cannot update software since upgrading to 4.1

devere — Tue, 03 Jan 2012 21:43:15 GMT

Just to be specific it is in the Operations tab in the Setup section of the Device. The Update server is indeed 'updates.paloaltonetworks.com'

Re: Cannot update software since upgrading to 4.1

rmonvon — Tue, 03 Jan 2012 21:47:36 GMT

Configuration appears to be fine. You may want to check again to see if the traffic is being blocked upstream. I would suggest collecting a pcap and see.

Thanks.

Re: Cannot update software since upgrading to 4.1

numberall — Tue, 17 Jan 2012 18:24:46 GMT

Hello,

I've been dealing with this same issue as well. It started with 4.1 for me too.

I can log into the firewall, and force it to update. But sometimes even then it gets stuck, and I have to log into the CLI and cancel the job.

Here's the email error message I get.

SYSTEM ALERT : high : Failed to check Content content upgrade info due to generic communication error

domain: 1
receive_time: 2012/01/17 13:14:20
serial: xxxxxxxxx
seqno: 11896
actionflags: 0x0
type: SYSTEM
subtype: general
config_ver: 0
time_generated: 2012/01/17 13:14:20
vsys:
eventid: general
object:
fmt: 0
id: 0
module: general
severity: high
opaque: Failed to check Content content upgrade info due to generic communication error

Re: Cannot update software since upgrading to 4.1

MGoodnow — Tue, 17 Jan 2012 19:14:24 GMT

I am seeing similiar effects (4.1.1). I noticed today that an auto scheduled AV download was at 30% for more than a week now. Which must of been effecting the threat content download from starting. URL updates are up to date though. The particular date of over a week ago was also when I found the AV download stuck the first time. After killing the job - I can perform a manual download/install. Seems to happen during the auto scheduled download.

Cheers,

Mike

Re: Cannot update software since upgrading to 4.1

numberall — Wed, 25 Jan 2012 20:13:11 GMT

Has there been any update on this? There is more then one person reporting the issue now. I'm still getting the same error message I reported in my previous post.

Thanks,

Daniel

Re: Cannot update software since upgrading to 4.1

rmonvon — Thu, 26 Jan 2012 04:15:37 GMT

Please contact Support to open a case so that we can diagnose & have this issue track. Thanks.

Re: Cannot update software since upgrading to 4.1

devere — Sat, 28 Jan 2012 14:48:15 GMT

so we have to contact our local IT company to see whether they can solve this? I don't wish to bring them in to waste time on a solution which looks a vague especially since everything was working pre upgrade.

Re: Cannot update software since upgrading to 4.1

fkrait — Wed, 08 Feb 2012 12:14:51 GMT

I had the same issue on 4.1.0.

The Check now in Software only generated the following error message:

"Failed to check Content content upgrade info due to generic communication error"

I resolved the issue by doing this:

Changed the Services - Primary DNS Server from internal dns server to external dns server.
Changed Palo Alto Updates in Service Route Configuration to use external fw interface.

Software list is now updated and 4.1.2 are now downloading 🙂

Re: Cannot update software since upgrading to 4.1

devere — Wed, 08 Feb 2012 12:44:52 GMT

awesome! it worked :smileygrin:

Thanks

Re: Cannot update software since upgrading to 4.1

ldormond — Tue, 28 Feb 2012 08:43:45 GMT

Hello,

I am facing the same issue with PA-2020 PanOS 4.2.

Tryingto update to PanOS 4.3, I am getting the message " Failed to check upgrade info due to generic communication error. Please check network connectivity and try again."

I can ping the PaloAlto update server and updates were working untill now.

Regards,

Laurent