Inability to Download GlobalProtect Client from Firewall

Jatin.Singh — Thu, 19 Mar 2020 23:51:09 GMT

We are currently attempting to update our globalprotect client on our Palo Alto firewall, a PA-500. The version we are attempting to download is 5.0.8.

Currently when attempting to download we get the following error

Which hasn't given us much indication of what the issue is, and how to rectify it.

We have checked the logs in an attempt to find additional information, which has given us the following information

administrator@PA-500> tail follow yes mp-log ms.log

2020-03-19 16:43:01.287 +1100 client dagger reported op command was SUCCESSFUL

2020-03-19 16:43:04.840 +1100 No upload information available

sh: -o/tmp/pan/downloadprogress.10006: No such file or directory

grep: /tmp/pan/downloadprogress.10006: No such file or directory

NO_MATCHES

2020-03-19 16:43:06.623 +1100 Error: pan_jobmgr_downloader_thread(pan_job_mgr.c:1110): DOWNLOAD job failed

NO_MATCHES

We have also tried the following.

- Restarting the Management Plane, with no change

- Attempted to download PAN-OS 7.1.25 (currently running PAN-OS 7.1.5) which seems to fail with the same message

- Changed the Service Route for PA updates to e1/5, with no change.

- Tried a tcpdump from the management plane when clicking 'Download' but could not spot the traffic (1x port 443 tcpfump filter, 1x all traffic - pcaps attached)

There doesn't appear to be any dropped sessions in the pcap so we currently don't think it's our upstream firewall.