topic Re: Fail installing Apps and threats content in General Topics

Fail installing Apps and threats content

SOC_CSG — Mon, 29 Sep 2014 14:50:46 GMT

Hi,

I cant install the new content in my firewall PA. I have tried by WebUI and CLI and its not being installed. If i use WebUI the installation finished OK but its not installed. Using CLI i can see FAIL.

request content upgrade install file panupv2-all-contents-458-2380.tgz

2014/09/29 15:56:47 4595 Install FIN FAIL 15:57:04

2014/09/29 15:52:52 4594 Install FIN FAIL 15:53:16 ------>Using CLI, FAIL

2014/09/29 15:33:25 4593 FqdnRefresh FIN OK 15:44:44

2014/09/29 15:16:55 4592 Install FIN OK 15:44:16 ------>Using webUI is OK but the upgrade is not done its like a bug

2014/09/29 15:03:10 4591 FqdnRefresh FIN OK 15:07:33

2014/09/29 14:45:24 4590 Install FIN OK 15:07:20

Re: Fail installing Apps and threats content

Retired Member — Mon, 29 Sep 2014 14:59:05 GMT

could you please write the output of the fail job

show jobs id 4594

Re: Fail installing Apps and threats content

SOC_CSG — Mon, 29 Sep 2014 15:03:32 GMT

telindus@fw1orgt(active)> show jobs id 4595

Enqueued ID Type Status Result Completed

--------------------------------------------------------------------------

2014/09/29 15:56:47 4595 Install FIN FAIL 15:57:04

Warnings:

Details:content update failed with the following messages:

Image File Authentication Error

Failed to extract rpm file /opt/pancfg/mgmt/content-images/tmp/panupv2-all-cont

ents-458-2380.tgz

Re: Fail installing Apps and threats content

SOC_CSG — Mon, 29 Sep 2014 15:08:55 GMT

telindus@fw1orgt(active)> tail mp-log paninstaller_content.log

Mon Sep 29 16:23:31 CEST 2014

***********************************************

******** old dir copy end time ***********************

******** copy end time ***********************

Mon Sep 29 16:27:07 CEST 2014

***********************************************

removing panupv2-all-contents-456-2370

******** extract start time *********************** /opt/pancfg/mgmt/content-images/panupv2-all-contents-458-2380.tgz

Mon Sep 29 17:07:19 CEST 2014

***********************************************

Re: Fail installing Apps and threats content

hshah — Mon, 29 Sep 2014 16:08:42 GMT

Hi COS,

Re-install PAN-OS and reboot the device. That should resolve issue.

For more information refer following document.

Dynamic Update Fails with "Image File Authentication Error" Message

Regards,

Hardik Shah

Re: Fail installing Apps and threats content

cpainchaud — Mon, 29 Sep 2014 16:43:19 GMT

Sometimes it's just because Threat licence is not installed on the device (Refresh licences on the device and see)

Re: Fail installing Apps and threats content

Retired Member — Mon, 29 Sep 2014 19:19:36 GMT

well if your licenses are correctly retreived then check https://live.paloaltonetworks.com/docs/DOC-3129

Re: Fail installing Apps and threats content

jperry1 — Tue, 30 Sep 2014 06:40:12 GMT

Try deleting not only the existing version of content but also the previous version of content. Once you have confirmed it is all deleted the "Check Now" to update. Then only download and install the latest version.

If that doesn't work follow the steps previously except use this command at the CLI prior to re downloading everything

> delete license key ?

Find the key and delete the key

Then retrieve licenses and after that download and install the newest content. Hope that helps.

Re: Fail installing Apps and threats content

SOC_CSG — Tue, 30 Sep 2014 14:12:36 GMT

I deleted all the content apps and threats, i checked, and i installed the last content and it worked but the problem now is that i cant find the threat in my vulnerability profile. i try to look for 36729 or bash and i cant find anything....im following these steps

Click the checkbox next to signature #36729 to enable an exception:
Click on the item listed under the "Action column to modify the action of this signature, and configure with the desired blocking action.

Re: Fail installing Apps and threats content

hshah — Tue, 30 Sep 2014 14:13:52 GMT

Hi COS,

Did you try following doc.

Dynamic Update Fails with "Image File Authentication Error" Message

Regards,

Hardik Shah

Re: Fail installing Apps and threats content

SOC_CSG — Tue, 30 Sep 2014 14:17:37 GMT

i got installed the last content version deleting all the content and refreshing and installing the last one. Now the problem is different.

I prefer try other things before talking to my customer in order to reinstall the software and restart the device.

Re: Fail installing Apps and threats content

Retired Member — Tue, 30 Sep 2014 15:27:02 GMT

Hi,

sometimes it cannot be seen after installing the content.Please log out and log in again.Then check if the signature comes or not

Re: Fail installing Apps and threats content

SOC_CSG — Tue, 30 Sep 2014 15:37:58 GMT

I did it and i cant still find it. In other PA with another firmware i can find the threat 36729 but i cant chane the action from alert to drop. the change is not saved

Re: Fail installing Apps and threats content

Retired Member — Tue, 30 Sep 2014 15:40:47 GMT

if you change the action with selecting Enable box, it should apply.

Re: Fail installing Apps and threats content

SOC_CSG — Tue, 30 Sep 2014 15:50:23 GMT

Yes, Panos you were right. Its weird not enought selecting Drop and OK. thanks