topic Re: Panorama Dynamic Updates SSL Connect Error in General Topics

Panorama Dynamic Updates SSL Connect Error

Elijah.Putnam — Wed, 28 Mar 2018 01:00:39 GMT

After upgrading some of our firewall and Panorama to PAN OS 8.x, we cannot push out dynamic updates from Panorama anymore. We are still able to push out dynamic updates to firewalls running anything below PAN OS 8.x, but nothing within the PAN OS 8.x range.

We verified and are not blocking port 28443 anywhere, but are getting an error when trying to manually push out dynamic updates from Panorama to firewalls running PAN OS 8.x

See screenshot. Any thoughts?

Re: Panorama Dynamic Updates SSL Connect Error

reaper — Thu, 29 Mar 2018 10:10:07 GMT

Hi @Elijah.Putnam

could it be you have secure client communication / Check Server Identity enabled on these devices?

Re: Panorama Dynamic Updates SSL Connect Error

Elijah.Putnam — Thu, 29 Mar 2018 16:10:07 GMT

Negative. We do not have this feature enabled on Panorama or the firewalls.

Re: Panorama Dynamic Updates SSL Connect Error

ITONMMBPLG — Thu, 12 Jul 2018 07:05:24 GMT

We have same issue with PanOS 8.1.2

Re: Panorama Dynamic Updates SSL Connect Error

ITONMMBPLG — Fri, 13 Jul 2018 06:43:25 GMT

Devices with Pan OS 8.x.x use new application for dynamic updates (paloalto-updates tcp 28443).

Re: Panorama Dynamic Updates SSL Connect Error

Stephanv9 — Fri, 01 Feb 2019 09:59:22 GMT

Did this get solved? If so could you share the solution please?

Nevermind...I've just figured out that the above post regarding the new application and port number is the correct answer. Thanks folks.

Re: Panorama Dynamic Updates SSL Connect Error

ITONMMBPLG — Fri, 01 Feb 2019 10:07:50 GMT

Yes, paloalto-updates app solved the issue.

Thanks.