topic Re: Dynamic Update from Panorama doesn't work in General Topics

Dynamic Update from Panorama doesn't work

MarcRestelli — Mon, 02 Jul 2018 06:49:48 GMT

I want to use Panorama to perform dynamic updates for the "Antivirus" and "Applications and Threat" sections.

On remote firewalls, I configured Panorama as the update server.
I also scheduled the automatic update via a template.

In Panorama, I have the latest versions of "Antivirus" and "Applications and Threat" installed. However, they are never deployed on remote equipment.

I also tried to manually push them on the firewalls, but I get an error message that the server cannot be reached.

What's also weird is that when I go to remote FWs and check for available updates, I don't get the same information about remote FWs.

Can you help me?

Translated with www.DeepL.com/Translator

Re: Dynamic Update from Panorama doesn't work

LukeBullimore — Wed, 04 Jul 2018 08:46:04 GMT

Hi @MarcRestelli

"On remote firewalls, I configured Panorama as the update server."

Did you set the update server (Device -> Setup -> Services) to the IP of the Panorama? If so, this isn't necessary and should be changed back.

Managing Dynamic Updates via Panorama should be done via Panorama > Device Deployment > Dynamic Updates. Please do refer to the below documentation.

https://www.paloaltonetworks.com/documentation/71/panorama/panorama_adminguide/manage-licenses-and-updates/schedule-a-content-update-using-panorama

Thanks,

Luke.

Re: Dynamic Update from Panorama doesn't work

MarcRestelli — Thu, 05 Jul 2018 13:45:42 GMT

Hi @LukeBullimore,

Thank you for your answer.

Yes, I tried with the dns name and IP address but it doesn't work with either of them.

However, since Panorama I see that there are new versions, but since the remote equipment I do not see them. On another remote device, I left updates.paloaltonetworks.com as server and there I see the new versions.

I don't know where else to look.

Re: Dynamic Update from Panorama doesn't work

LukeBullimore — Thu, 05 Jul 2018 13:48:55 GMT

Hi @MarcRestelli,

Please keep the update server on all devices as "updates.paloaltonetworks.com"

Please could you clarify your question? On Panorama you see the latest Dynamic Updates but on the firewalls you don't?

After changing the update server back, please click "Check Now" from Device -> Dynamic updates to see the updates; provided the firewall has internet connectivity from the management interface, it will pull these updates from the update server.

If you wish to push and manage content updates via Panorama, please refer to my previous note.

Thanks,

Luke.