topic Re: Apps and Threats 578-3263 URGENT SOLVED in General Topics

Apps and Threats 578-3263 URGENT SOLVED

Jack_Howells — Wed, 13 Apr 2016 10:09:57 GMT

We have had a few issues with customers and their network when upgrading to the latest Apps and Threats update.

Can anyone comment on this at all?

A few examples of issues are that decryption is not working, and communication to the LDAP server was lost. Sessions are closed with the error message "resources unavailable".

Regards

Jack

Re: Apps and Threats 578-3263 URGENT

RolandR — Wed, 13 Apr 2016 10:05:54 GMT

Hello Jack,

Revert to content 577.

Kind regards,

Roland

Re: Apps and Threats 578-3263 URGENT

Jack_Howells — Wed, 13 Apr 2016 10:09:29 GMT

Hi Roland,

Thanks for providing the solution, but I am just letting people know/asking if anyone else is having the same issue.

Cheers

Jack

Re: Apps and Threats 578-3263 URGENT

MartinIngebrigtsen — Wed, 13 Apr 2016 10:12:08 GMT

We were warned of issues with 578-3263 by some colleagues, so we we've temporarily disabled automatic updates.

The issue seems to be with the update signature for msrpc.

Re: Apps and Threats 578-3263 URGENT

RolandR — Wed, 13 Apr 2016 10:13:33 GMT

Yes, others experience the same problem.

Re: Apps and Threats 578-3263 URGENT

ElmarvMo — Wed, 13 Apr 2016 11:34:31 GMT

With 578-3267 we had problems regarding DNS. Queries returned 0 bytes.

Elmar

Re: Apps and Threats 578-3263 URGENT SOLVED

Retired Member — Wed, 13 Apr 2016 12:16:42 GMT

Apps and Threats Update 578 is pulled by Palo Alto.

Waiting for their statement.

Re: Apps and Threats 578-3263 URGENT SOLVED

Retired Member — Wed, 13 Apr 2016 13:17:31 GMT

We were also seeing many sessions ending due to 'resources'unavailable' after updating to app and threat 578. Restarting the dataplane seemed to clear it up temporarily. I have reverted to version 577 on all of our boxes and disabled automatic updates until I see some kind of respose from Palo Alto indicating the issue has been resolved.

Re: Apps and Threats 578-3263 URGENT SOLVED

Jack_Howells — Wed, 13 Apr 2016 13:25:51 GMT

Hi Sam,

Palo have informed us that they have now removed 578 from the update server and that reverting to 577 is a workaround.

We haven't had anything more on the status of a new content update, but I'm sure they'll extensively test the next one before it comes out. 🙂

Cheers

Jack

Re: Apps and Threats 578-3263 URGENT SOLVED

TheRealDiz — Wed, 13 Apr 2016 13:28:23 GMT

Hi @Jack_Howells,

We have the same issue on different customers enviroment.

We reverto to 577 .. What a huge problem!!! 😧

Everything was down in term of connectivity on customers side

I hope everyone solved this

Re: Apps and Threats 578-3263 URGENT SOLVED

melliott — Wed, 13 Apr 2016 13:56:45 GMT

That was particularly painful...

Re: Apps and Threats 578-3263 URGENT SOLVED

courier72 — Wed, 13 Apr 2016 14:02:31 GMT

Agreed. I was not expecting to find the solution the issue in that place. As we were working backwards through the issue, it was the only thing that made sense af far as the timeline of failure as we saw it on our end.

Re: Apps and Threats 578-3263 URGENT SOLVED

TheRealDiz — Wed, 13 Apr 2016 14:54:58 GMT

Hi all,

I have tested another work-around, simply reboot your PA firewall solve this issue.

Also I Have tested with 7.1.0 and I can clearly see that 578 content doesn't cause any kind of issue with this PAN-os version.

So in conclusion you can:

- Revert to 577

- Reboot your PA firewall

- Install latest PAN-os version 7.1

All of these options solve this issue.

Best Regards

Luca

Re: Apps and Threats 578-3263 URGENT SOLVED

Jack_Howells — Wed, 13 Apr 2016 16:06:45 GMT

Hi Luca,

This is brilliant, thanks for your hard work.

However.. Palo have removed the 578 content update from the update server, so this is now irrelevant 😛

I appreciate your efforts however, good job!

Re: Apps and Threats 578-3263 URGENT SOLVED

zac_hg — Wed, 13 Apr 2016 16:08:07 GMT

I was told only the 3K platforms are affected and it is a resource depletion issue. Can anyone confirm if they've seen the issue on other platforms? I've confirmed that at least 2 PAN-VM series don't have the issue with update 578.

Re: Apps and Threats 578-3263 URGENT SOLVED

pmc — Wed, 13 Apr 2016 16:09:14 GMT

This brought down mail for our entire organization. Only SMTP was affected but it left a lot of users unhappy.

Re: Apps and Threats 578-3263 URGENT SOLVED

Jack_Howells — Wed, 13 Apr 2016 16:12:22 GMT

I can confirm that all of the customers that reported an issue to us today were using the 3000 series firewalls.

Thanks for the info.

Re: Apps and Threats 578-3263 URGENT SOLVED

TheRealDiz — Wed, 13 Apr 2016 16:18:46 GMT

Hi @Jack_Howells,

I know that 578 it was removed by PA .. I was busy with customers.

I just want to share with you, my experience with this issue 😛

Probably in future we need to pay attention with Content Update and PANos version.. Cause today with 7.1.0 update 578 works fine.

In order to avoid an important business impact on enviroments .. I have spent a lot of hours during this morning just to understand this behavior and cause of issue.

I hope this was helpful.

Ciao

Luca

;)))))

Re: Apps and Threats 578-3263 URGENT SOLVED

Brandon_Wertz — Wed, 13 Apr 2016 17:04:28 GMT

Not trying to absolve Palo of the issues here, but there is the option to delay the install for up to 5 days. I haven't been keeping track of timelines as to when the update was reverted, so I'm not sure if this option would have helped anyone in this scenario.

Just an option for people out there.

Re: Apps and Threats 578-3263 URGENT SOLVED

jdprovine — Wed, 13 Apr 2016 17:59:58 GMT

I was surprised that the notification from palo didn't come out quicker, they are usually very good about that. I have a 5050 and didn't have any issues but I also got 578-3267 not 3260

topic Re: Apps and Threats 578-3263 *URGENT* *SOLVED* in General Topics

Apps and Threats 578-3263 *URGENT* *SOLVED*

Re: Apps and Threats 578-3263 *URGENT*

Re: Apps and Threats 578-3263 *URGENT*

Re: Apps and Threats 578-3263 *URGENT*

Re: Apps and Threats 578-3263 *URGENT*

Re: Apps and Threats 578-3263 *URGENT*

Re: Apps and Threats 578-3263 *URGENT* *SOLVED*

Re: Apps and Threats 578-3263 *URGENT* *SOLVED*

Re: Apps and Threats 578-3263 *URGENT* *SOLVED*

Re: Apps and Threats 578-3263 *URGENT* *SOLVED*

Re: Apps and Threats 578-3263 *URGENT* *SOLVED*

Re: Apps and Threats 578-3263 *URGENT* *SOLVED*

Re: Apps and Threats 578-3263 *URGENT* *SOLVED*

Re: Apps and Threats 578-3263 *URGENT* *SOLVED*

Re: Apps and Threats 578-3263 *URGENT* *SOLVED*

Re: Apps and Threats 578-3263 *URGENT* *SOLVED*

Re: Apps and Threats 578-3263 *URGENT* *SOLVED*

Re: Apps and Threats 578-3263 *URGENT* *SOLVED*

Re: Apps and Threats 578-3263 *URGENT* *SOLVED*

Re: Apps and Threats 578-3263 *URGENT* *SOLVED*

topic Re: Apps and Threats 578-3263 URGENT SOLVED in General Topics

Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT

Re: Apps and Threats 578-3263 URGENT

Re: Apps and Threats 578-3263 URGENT

Re: Apps and Threats 578-3263 URGENT

Re: Apps and Threats 578-3263 URGENT

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED