topic PAN HA Pair Shows Antivirus Mismatch But Are Correct On Device Page in General Topics

PAN HA Pair Shows Antivirus Mismatch But Are Correct On Device Page

michaelmertens — Thu, 17 Jan 2019 13:52:16 GMT

Totally new to PAN...So I upgraded a pair of PA500s in HA to 7.1.17, and since then (I believe) the dashboard on each shows Antivirus Mismatch. When I fly over the "Antivirus Mismatch on either's dashboard, both show the active PAN as having the older version). However, on the DEVICE> Dynamic Updates tab both devices show 2861-3371 downloaded and currently installed. I also cannot commit changes to the PAN Group- commit fails, and I suspect this is why.

Any suggestions for a newbie like me?

Thanks!

Re: PAN HA Pair Shows Antivirus Mismatch But Are Correct On Device Page

OtakarKlier — Thu, 17 Jan 2019 17:36:42 GMT

Hello,

When you have you dynamic updates run, is it set to update its peer? Also do you have dynamic updates running on both of them? Are they set to run at different intervals, i.e. at 15 mins past the hour for one and 30 minutes for the other?

They could be trying to update each other at the same time causing a conflict. If none of hte statments above are true, maybe a call to support since it could be a bug.

Regards,

Re: PAN HA Pair Shows Antivirus Mismatch But Are Correct On Device Page

BPry — Fri, 18 Jan 2019 22:28:15 GMT

@michaelmertens,

If the versions are actually set correctly and you've verified this through the CLI and not just the GUI, I would also recommend restarting the management server prior to calling support as @OtakarKlier mentioned just to make sure that doesn't clear things up.