topic Re: PA-3020 AutoCommit fails - commit force fails in General Topics

PA-3020 AutoCommit fails - commit force fails

MPI-AE — Wed, 07 Jun 2017 16:55:18 GMT

Hey all!

I have a problem with my second passive PA-3020. (7.1.7)

We had a loss of power so the firewall was shutdown hard.

When it's booting now, the autocommit fails.

When I do a commit force, it says: "Threat database handler failed".

Then I stumbled over this link: https://live.paloaltonetworks.com/t5/Featured-Articles/Threat-Database-Handler-Commit-Error/ta-p/120490

When I do the request anti-virus upgrade install file, it says: "Server error : Failed to schedule an install job".

Can someone help me?

Thanks!

Re: PA-3020 AutoCommit fails - commit force fails

TranceforLife — Wed, 07 Jun 2017 21:42:23 GMT

Hi,

A couple of quick questions:
- Have you tried rebooting the firewall?

- Have you tried manually uploading the database?
- What other things have you tried?

You might need to do a factory reset to get this fixed.

Re: PA-3020 AutoCommit fails - commit force fails

Raido_Rattameister — Wed, 07 Jun 2017 21:45:34 GMT

Have you tried to download latest database from support portal, uploaded it manually and tried to install then?

Edit: @TranceforLife was faster 🙂

Re: PA-3020 AutoCommit fails - commit force fails

TranceforLife — Wed, 07 Jun 2017 21:48:00 GMT

😄

p.s We had exactly the same case with TAC.

Re: PA-3020 AutoCommit fails - commit force fails

MPI-AE — Thu, 08 Jun 2017 06:21:17 GMT

Yeah I rebooted the firewall, but still the same.

And I tried to manually install the antivirus:

"Server error : Failed to schedule an install job".

Re: PA-3020 AutoCommit fails - commit force fails

TranceforLife — Thu, 08 Jun 2017 10:53:00 GMT

You might need to reset the firewall to its default. At least this is what we were doing. Not the best solution but might be the only one way to bring the device back online.

Re: PA-3020 AutoCommit fails - commit force fails

MPI-AE — Thu, 08 Jun 2017 07:19:34 GMT

and then restore the config or will there be the same problem?

Re: PA-3020 AutoCommit fails - commit force fails

TranceforLife — Thu, 08 Jun 2017 07:54:10 GMT

Yes, just restore the confirm. This issue is not a configuration issue.

Re: PA-3020 AutoCommit fails - commit force fails

kiwi — Thu, 08 Jun 2017 10:51:14 GMT

Hi @MPI-AE,

The Threat database handler is a 'known' commit failure.

In most cases a corrupt AV signature database or Content database will cause these type of auto commit failures. AV update process or Content update process might have been terminated abruptly without any indication to the user leaving the AV signature database corrupt or Content database corrupt.

Usually a manual Anti-Virus install from the CLI will serve as a workaround for this issue. Download the Anti-Virus file manually from https://support.paloaltonetworks.com and upload the same to the firewall. After the upload, use the following command to do the manual AV install from the CLI.

> request anti-virus upgrade install file

If the manual install workaround fails for some reason, then another workaround for this issue is described below:

Remove the contents of the following folders (root access might be required ... contact Support for this):
/opt/pancfg/mgmt/updates/curav/
/opt/pancfg/mgmt/updates/oldav/
Remove only the contents of the folder and leave the folders intact.
Restart the device server process.
Do a commit force.

Hope it helps !

-Kiwi.

Re: PA-3020 AutoCommit fails - commit force fails

MPI-AE — Thu, 08 Jun 2017 11:37:18 GMT

Hey kiwi,

yeah that's it!

I had to contact TAC because I tried everything.

There were corrupted content files.

So TAC removed these files with root.

And then we were able to do the commit.

Re: PA-3020 AutoCommit fails - commit force fails

MehmetAcar — Mon, 30 Jan 2023 15:09:30 GMT

Hi @MPI-AE

Did you fix it? If so , do you remember what was the solution ? 🙂

Re: PA-3020 AutoCommit fails - commit force fails

DavidMontesano — Sun, 17 Sep 2023 10:21:07 GMT

Hi there! Im facing the same issue here with a PA440 version 10.2.4

This failure, according to what I have been seeing in different forums. It is caused by Dynamic updates - AutoCommit fails - commit force fails. When I do the request anti-virus upgrade install file, it says: "Server error : Failed to schedule an install job". Also I realice that I lost the eth.Ports on the FW.

I have tried to apply the solution that @kiwi said, but without much luck, maybe I did something wrong.

Anyone that face the same issue that can help? or a guideline much more easy to understand?

Regards!