topic Re: Application and Threat update failing in General Topics

Application and Threat update failing

Desa_Bowman — Fri, 08 Feb 2019 00:53:52 GMT

hi,

I am trying to update my content (Application and Threat) under Dynamic update, however it is continuosly failing with the below error,

Enqueued Dequeued ID Type Status Result Completed
------------------------------------------------------------------------------------------------------------------------------
2019/02/07 19:43:17 19:43:17 125645 Content FIN FAIL 19:43:24
Warnings:
Details:Failed to update content with following message: encfilesize is 47069424
No matching apps package found in panupv2-all-contents-8120-5288.tgz
exiting with 255

-Till now, I have performed the following steps for updating this VIA CLI however no luck;

Resolution

A license fetch will trigger a content update and a forced license update can be achieved with the following commands:

> request license fetch

Download and install the content:

> request content upgrade check

> request content upgrade download latest

> request content upgrade install version latest

--------------------------------------------

Thank you.

Re: Application and Threat update failing

reaper — Tue, 12 Feb 2019 15:01:00 GMT

can you try deleting you content packages and redownloading?

> delete content update *

(this will not touch the installed package)

Re: Application and Threat update failing

Retired Member — Wed, 13 Feb 2019 05:06:46 GMT

Having the same problem here on our M-500 running 8.1.6. Deleted all content and av packages, redownloaded latest and get this output from the install job:

Failed to update content with following message: encfilesize is 47107248
No matching apps package found in panupv2-all-contents-8122-5298.tgz
exiting with 255

Re: Application and Threat update failing

reaper — Wed, 13 Feb 2019 09:28:26 GMT

try deleting all, then perfoming a 'check' and only then downloading and installing a fresh package

Re: Application and Threat update failing

Retired Member — Wed, 13 Feb 2019 23:04:49 GMT

Still get the same error. Going to provide tech support and open case. Will update the community if TAC has a fix

Re: Application and Threat update failing

Retired Member — Thu, 14 Feb 2019 03:06:16 GMT

Turns out our Panorama had too many licenses assigned to it... namely the Threat Prevention, GlobalProtect Gateway and Autofocus licenses. This causes the Panorama to try to download the app/threat content package that firewalls use instead of just the apps package that Panorama uses. You can manually download the apps from the customer service portal and upload to the Panorama as a workaround in the meantime.

Re: Application and Threat update failing

KonradPolakowski_OCD — Mon, 09 Mar 2020 16:33:17 GMT

Any solution for this issue ?

Re: Application and Threat update failing

EliSz — Fri, 15 May 2020 08:51:29 GMT

Hello,

In my case:

Problem

Offline deployment (Panorama with no access to the Internet)

Error MSG-

Warnings:
Details:Failed to update content with following message: encfilesize is 53118240
No matching apps package found in panupv2-all-contents-8263-6055.tgz
exiting with 255

-Panorama PANOS version 9.0.2-h4. esxi

What we try:

License was there but we re imported from the Sup portal. - did not help

Restart of the management plane - did not help

Removing all the other packages and restart of the management plane - did not help

Upgrade from 9.0.2-h4 to 9.0.6 - did not help

Solution

On the final round what we did was

We re-download the app+threats package from the support portal,

clear all the other packages except the one that was in use

restart of the management plane

re-import the package to the device and install.

That seem to work in our case.

We had a case open with Palo but due to the limited access to the unit, no serious troubleshooting session was done and we also couldn't find anything in the Tech support file.

-----

Last message from Palo engineer that was sent and we didn't try was:

Would you please try to delete the old content cache too and restart device-server and management-server processes after that:
delete content cache old-content

-----
Strange.

Thanks,

Eli

Re: Application and Threat update failing

greg_murphy — Mon, 23 Aug 2021 14:49:09 GMT

We're having the same issue. We tried all the things detailed in this thread. Then we went so far as to scrub the PA with a factory default and tried the all-apps package before configuring anything else. Still have the issue.

Re: Application and Threat update failing

Ram_Bista — Thu, 02 Sep 2021 17:22:52 GMT

I am on the same boat. No Internet access from my Panorama. How do we fix it offline?

Re: Application and Threat update failing

Tadzio — Fri, 12 Aug 2022 18:43:20 GMT

I am also having this issue, and I have also tried all suggestions in this thread. I spoke with TAC for 2 hours this morning and they're still scratching their heads. Yesterday I sat on hold for 2 hours listening to repeated reminders to check out the Live Community, because support personnel constantly monitor all posts and provide solutions. The most recent post was almost a year ago, and I see no signs of TAC assistance. Not feeling the love.

Re: Application and Threat update failing

Dash.Ranasinghe — Fri, 19 Aug 2022 03:38:37 GMT

Hi @Tadzio , What Model and software version are you running?

Re: Application and Threat update failing

EUREKA-NETWORKS — Tue, 30 Aug 2022 17:40:59 GMT

The problem is because there is a conflict of expired licenses with new valid licenses. Expired licenses must be removed with the command:

> delete license key "expired license"

Previous (not current) versions of content updates must be removed.
The content update must then be downloaded from the Customer Support Portal and manually imported and installed on the device.

Re: Application and Threat update failing

Old-Roo — Fri, 28 Oct 2022 01:54:30 GMT

i am too having this issue. I have deleted the certificates, tried everything in this thread and others.

redownloaded the licenses, cleared content, deleted files only for a manual update for the only thing that works.

Sometimes it will automatically download content files and refuses to install them

it wont download antivirus or install them.

Getting tired of going through this manual process.

This was supposed to be fixed in 9.1.15.

Very frustrating.

Re: Application and Threat update failing

AndresAlfaro — Tue, 01 Nov 2022 22:48:38 GMT

Cordial greetings

Team

Has anyone managed to solve the problem? I have exactly the same problem and I have not been able to solve it.

Re: Application and Threat update failing

rbs — Wed, 04 Jan 2023 06:08:40 GMT

Thank you @Retired Member the above workaround still works today .

Re: Application and Threat update failing

mdensley — Fri, 11 Aug 2023 22:22:26 GMT

I ran into this issue today and the issue was that we applied a VM-Flex credits deployment profile Auth Code to Panorama which caused it to download several licenses that are meant for a firewall and not Panorama. As a result we saw improper licenses applied to Panorama such as Threat Prevention, Wildfire, etc. Once we removed those license keys and grabbed the Panorama Serial number from Software NGFW Devices > Panorama and replaced the wrong SN that was somehow downloaded when the AuthCode was applied under Panorama > Setup > Management > General Settings > Serial Number. Then Panorama was able to download and install Apps & Threats without errors.