topic AV version confusion in General Topics

AV version confusion

DavePalo — Tue, 08 Sep 2015 12:15:18 GMT

Hi all,

I have a HA pair (A/P) of PA-500s and one of the devices seems to be giving mixed messages about the version of the AV definitions in use. This has been the case for a couple of weeks now.

It is not causing problems as such, but it is not right either. If anybody can advise on how I can get our PA-500 to report correctly it would be appreciated!

Please see below where the mismatch message and general window seem to contradict each other.

It suggests 1637-2114 is installed here too...

...and the log seems to suggest that is was installed but then says it failed.

If I change something in the policy and perform a commit then the mismatch will go away.

Any help appreciated!

Many thanks,

Dave

Re: AV version confusion

HITSSEC — Sat, 12 Sep 2015 01:21:42 GMT

dyoung,

While your settings are correct and the AV version should be the same on both appliances occassionally we have seen the file transfer (AV updates) not being successfully pushed across to the peer. Sometimes you may have to force a config synchonization or when you do your next commit it wil be pushed accross to the peer.

Hope this helps,

Phil

Re: AV version confusion

DavePalo — Wed, 16 Sep 2015 15:37:22 GMT

Hi Phil,

Thanks for your reply.

The strange thing is that the AV updates always got pushed to the peer device and installed fine. I think our situation was the opposite way around to yours in that the peer device was reported to be running more recent AV defs than our active unit.

Fortunately though this issue seems to have gone away since the weekend. We haven't made any changes or rebooted the unit, it just started working again. Very odd.

Thanks,

Dave