topic Re: GlobalProtect Clientless VPN package update fails in General Topics

GlobalProtect Clientless VPN package update fails

Jacopo_Vigano — Sun, 12 Feb 2017 20:53:04 GMT

Hello Community,

i have an issue with download the latest version of GlobalProtect Clientless VPN package update.

I have installed from scratch PANOS 8.0.0 and I have a valid Global Protect License but i'm not able to download the package from updates.paloaltonetowks.com. I'm able to download successfully all other Dynamic updates and Software.

I always see Last checked: never.

If i try to install it via CLI i have this error:

user@PA-3020> request global-protect-clientless-vpn upgrade download latest

Server error : No update information available

I have already tried to change the update server from updates.paloaltonetoworks.com to staticupdates.paloaltonetwork.com and tried to disable "Verify Update Server Identity" but the error remains.

Do you have any idea to resolve this issue?

Thanks in advance.

Jacopo

Re: GlobalProtect Clientless VPN package update fails

reaper — Mon, 13 Feb 2017 08:12:57 GMT

Hi Jacopo

please click the 'check now' button at the bottom of the dynamic updates page, this loads the latest available images from the updates server:

the CLI version is

> request content upgrade check

Re: GlobalProtect Clientless VPN package update fails

Jacopo_Vigano — Mon, 13 Feb 2017 15:38:53 GMT

Hi Reaper,

i have already tried to do "Check Now" and "request content upgrade check" without success.

I still see Never as Last Check. I tried to change Service Route Configuration without success.

Thanks.

Jacopo.

Re: GlobalProtect Clientless VPN package update fails

reaper — Tue, 14 Feb 2017 10:24:43 GMT

hm.. as a last resort you could try restarting the management-server or rebooting the firewall and see if that helps, else you should reach out to support

Re: GlobalProtect Clientless VPN package update fails

Jacopo_Vigano — Tue, 14 Feb 2017 19:12:29 GMT

Hi Reaper,

i tried to restart management-server and reboot the firewall but the issue still there.

I tried to factory reset with PANOS 8.0.0 and reload the actual configuration without success.

I think i need to open a support ticket, can i open a ticket with an NFR appliance?

Thanks.

Jacopo.

Re: GlobalProtect Clientless VPN package update fails

reaper — Tue, 14 Feb 2017 22:20:12 GMT

ofcourse! please go ahead and create a support ticket. sounds like something is really stuck

Re: GlobalProtect Clientless VPN package update fails

gwesson — Tue, 14 Feb 2017 22:38:25 GMT

2 things to check:

1. Do you have a valid GlobalProtect Gateway license (you said a GP license, but there used to be a Portal license and a Gateway license, only the Gateway is valid and will work for GP Clientless VPN).

2. Check your ms.log file when trying to get the update. You can run:

tail follow yes mp-log ms.log
--or--
less mp-log ms.log (shift+g to go to the end of the file)

That will tell you exactly what's happening beyond the error presented in the CLI. There tend to be a bunch of lines for each request (DNS lookup of the update site, connection, downloading, etc.) so you may need to do some scrolling.

You should see something along the lines of "File successfully downloaded" if it's there.

Re: GlobalProtect Clientless VPN package update fails

Jacopo_Vigano — Thu, 16 Feb 2017 10:05:21 GMT

Hi @gwesson,

I have GP Gateway license installed and i check ms.log file during dynamic updates and i found this error:

/opt/pancfg/mgmt/global/gpinfo.xml:1: parser error : Document is empty

^
2017-02-16 11:01:45.891 +0100 Error: pan_file_to_xml(pan_xml_utils.c:550): error parsing file /opt/pancfg/mgmt/global/gpinfo.xml
2017-02-16 11:01:45.891 +0100 Error: _get_content_version_info(pan_ops_content.c:681): Bad update information on disk

Do you have any idea to solve this error?

Thanks in advance.

Jacopo

Re: GlobalProtect Clientless VPN package update fails

gwesson — Thu, 16 Feb 2017 17:37:50 GMT

@Jacopo_Vigano afraid not. It's not something I've seen before, but because you're getting an error I could recommend opening a case as @reaper mentioned. I'd reference this thread as well since you provided so much detail.

Best regards,

Greg

Re: GlobalProtect Clientless VPN package update fails

Jacopo_Vigano — Fri, 07 Apr 2017 10:28:55 GMT

Hi All,

i opened a case and the issue was related of Palo Alto Updates portal.

Thanks for your time.

Jacopo