topic Re: Apps/Threat out of Sync on Passive Panorama. in General Topics

Apps/Threat out of Sync on Passive Panorama.

Gareth.Doyle — Wed, 02 Dec 2020 23:00:47 GMT

On one set of panoramas I noticed that the Apps/Threats are out of sync. The passive device downloaded, but did not install the update like the active device did.

The active device is set to sync with peer during the scheduled update.

The trouble is that I cannot update the passive panorama because that is considered a policy change. I was wondering if anyone had a solution to this (other than deleting it from the active, redownloading and syncing, and installing).

Thanks!

Re: Apps/Threat out of Sync on Passive Panorama.

S.Cantwell — Wed, 02 Dec 2020 23:15:51 GMT

Dynamic Updates really should not be considered policy changes (more like database updates)

Anyways.. the FWs will be using the updated Apps/Threats from the active Panorama anyways.

You can wait until next week (maybe even later this week, as PANW could make multiple Threats Updates in a single week. ) when updated Apps/Threats come out and manually download/sync to peer vs letting the automation/scheduling do it for you.

How do you want to proceed?

Re: Apps/Threat out of Sync on Passive Panorama.

Gareth.Doyle — Thu, 03 Dec 2020 00:44:11 GMT

I agree, but I also understand why it is viewed as a policy.

That said, I was hoping there was a way to force sync without changing settings on the active Panorama, I would rather not have to wait until the next time this is pulled and syncs. I suspect that downloads were bad on the passive device for some reason as when I deleted and manually re-downloaded the anti-virus it installed without issue.

Thanks.