topic Re: Can't update Global Protect through the NGFW (5.1.1 - 5.1.5) in General Topics

Can't update Global Protect through the NGFW (5.1.1 - 5.1.5)

Marc.Luecke — Thu, 09 Jul 2020 15:22:52 GMT

Hi,

I have the problem that, running GP 5.1.1 I get the message that there is a newer GP Version (5.1.5) available.

But when I try to update, the update is not working.

The Debug Log shows:

(T8312)Info ( 604): 07/08/20 07:41:15:329 #### updater started, command is C:\Users\[...]\_temp3356.msi

(T8312)Debug ( 39): 07/08/20 07:41:15:329 try verify file C:\Users\[...]\_temp3356.msi

(T8312)Error ( 165): 07/08/20 07:41:15:334 The file C:\Users\[...]\_temp3356.msi is not signed or corrupted

(T8312)Error ( 634): 07/08/20 07:41:15:334 file did not signed by us, return now

Until now, I could not figure out what goes wrong.

Maybe someone had the problem earlier and can help out?

Best regards,

Marc

Re: Can't update Global Protect through the NGFW (5.1.1 - 5.1.5)

BPry — Thu, 09 Jul 2020 22:05:48 GMT

@Marc.Luecke,

Is this on every machine that you attempt to upgrade or just one particular machine?

Re: Can't update Global Protect through the NGFW (5.1.1 - 5.1.5)

Marc.Luecke — Fri, 10 Jul 2020 09:32:17 GMT

Hi,

it seems to be just this Client in particular..

Best regards,

Marc

Re: Can't update Global Protect through the NGFW (5.1.1 - 5.1.5)

BPry — Fri, 10 Jul 2020 14:49:48 GMT

@Marc.Luecke,

I would simply delete that temp msi file and force the agent to re-download the update from the gateway.

Re: Can't update Global Protect through the NGFW (5.1.1 - 5.1.5)

Marc.Luecke — Tue, 14 Jul 2020 10:30:57 GMT

Hi,

thanks for the answers so far.

For now, we have several other Clients with the same problem.

I tried to activate and use GP Client Version 5.1.3 but it shows the same behavior as mentioned before.

Maybe someone has additional thoughts about that?

Best regards,

Marc

Re: Can't update Global Protect through the NGFW (5.1.1 - 5.1.5)

Marc.Luecke — Tue, 14 Jul 2020 12:13:02 GMT

@BPry

I tried that but unfortunately the problem still occurs.

Re: Can't update Global Protect through the NGFW (5.1.1 - 5.1.5)

Marc.Luecke — Tue, 21 Jul 2020 09:57:21 GMT

Hi everyone.

I got a solution from PAN for this one.

As the GP Client (in this particular Case) could not resolve the GP Portal FQDN through the VPN tunnel, the update failed.

The solution was to create an entry on the internal DNS Server that resolved the Portal Name to the corresponding IP.

After that, the update finally was possible.

Maybe someone comes around with the same problem and can find the solution here.

Best regards,

Marc