topic Re: Automatic updates broken? in General Topics

Automatic updates broken?

RobinClayton — Fri, 05 Jun 2020 13:56:46 GMT

Anyone else got trouble with Dynamic content updates??

Failed to download due to generic communication error. Please try again later.
Failed to download file

Re: Automatic updates broken?

ShaiW — Mon, 08 Jun 2020 14:10:15 GMT

Did you try disabling this 'Verify Update Server Identity' under Device->Setup->Services.

I've see proxies that interfered with the update server certificate causing the NGFW to fail to connect.

Hope this helps,

Shai

Re: Automatic updates broken?

Remo — Mon, 08 Jun 2020 21:08:53 GMT

Hi @RobinClayton

Do you whitelist the specific domains that the firewalls require to communicate / to download updates ... ?

At least I am doing this and I had the same error since a few days. Today I found out that some firewalls (mainly PA-200 and PA-220) no longer communicate to the url prod.itpdownloads.paloaltonetworks.com as documented here: Content Delivery Network Infrastructure

Since a few days these firewalls try to connect to proditpdownloads.paloaltonetworks.com. As soon as I opened this URL the downloads were successfull again.

Regards,

Remo

Re: Automatic updates broken?

olethomas — Tue, 09 Jun 2020 07:10:39 GMT

Hi,

I added "SSL" application to the Palo Alto SW updates rule and everything started working again.

Re: Automatic updates broken?

RobinClayton — Wed, 10 Jun 2020 10:23:51 GMT

So something has been BROKEN again..

I did think updates were set to the external interface on the service router, but I may have changed that after the updates were broken back in that autumn (northern hemi)... With the SR for Palo Networks set on the external interface I am picking up updates once more..