updates.uswest2.gslb.paloaltonetworks.com

DonohoeRobert — Wed, 29 Nov 2017 23:43:30 GMT

Hi Team,

Has the update server changed for dynamic updates ? updates.paloaltonetworks.com showing generic communication errors. A ping to updates.paloaltonetworks.com resolves to the address in the title, when ye change it in the config [device>setup>services>update server] connects again fine..

admin@TAC-HomeLab> ping source 10.10.20.1 host updates.paloaltonetworks.com
PING updates.uswest2.gslb.paloaltonetworks.com (52.37.195.67) from 10.10.20.1 : 56(84) bytes of data.

know about the article below, when the update server config is updates.paloaltonetworks.com won't connect, allow all from that IP, no sec profiles.

https://live.paloaltonetworks.com/t5/Management-Articles/Unable-to-Perform-Dynamic-Updates-with-quot-updates/ta-p/56998

changing it to the one in the title connects again fine, only when ye unselect the checkbox to verify update server...

new one

Cheers

Rob

Re: updates.uswest2.gslb.paloaltonetworks.com

reaper — Thu, 30 Nov 2017 20:43:05 GMT

updates.paloaltonetworks.com does not reply to ping, it is a cloud address that resolves to a server geographically closest to you, the update server FQDN itself has not changed and is still (and will always be) updates.paloaltonetworks.com

If you're seeing generic communcations errors there might be local peering/routing or dns issues

If you connect to that sub-server the verification will fail as the server will authenticate as updates.paloaltonetworks.com but you are addressing it by it's unique FQDN

topic Re: updates.uswest2.gslb.paloaltonetworks.com in General Topics

updates.uswest2.gslb.paloaltonetworks.com

Re: updates.uswest2.gslb.paloaltonetworks.com