topic Re: Wildfire info failed in General Topics

Wildfire info failed

annielee — Wed, 02 Jun 2021 01:12:17 GMT

Constantly (every minute) getting this error from Panorama, currently running on Panorama v10, having difficulty to find the details what records are not found.

SYSTEM ALERT : high : Retrieving Content 'WildFire' info failed with error 'No record...

Thanks in advance

Re: Wildfire info failed

Remo — Wed, 02 Jun 2021 02:20:05 GMT

Hi @annielee

Is your panorama - at least sometimes - updating wildfire content update successfully? If not, does it work when you do it manually?

Re: Wildfire info failed

annielee — Wed, 02 Jun 2021 02:55:30 GMT

Yes, i can see the wildfire has been installed for the latest versions, which is why im puzzled what are the messages for 🙂

Re: Wildfire info failed

Joshan_Lakhani — Sun, 11 Jul 2021 13:12:23 GMT

@annielee @Remo

Iam also facing same issue please advice if it's resolve as my firewall version is pan-os 10.0.5 and iam facing this same issue on firewall.

Regrads,

Joshan

Re: Wildfire info failed

fhewiufhwefhwe — Sat, 17 Jul 2021 10:39:36 GMT

Not resolved. I am facing the issue with 10.0.6

Re: Wildfire info failed

Joshan_Lakhani — Sat, 17 Jul 2021 11:03:16 GMT

@fhewiufhwefhwe

In wildfire content select schedule from every minute to real time. Then you cannot received these alert.

Regards,

Joshan Lakhani

Regards,

Joshan Lakhani

Re: Wildfire info failed

fhewiufhwefhwe — Sat, 17 Jul 2021 11:25:29 GMT

Thanks, that solved it. Did you happen to also run into Retrieving Content 'GPclient' info failed with error 'No updates availablegpcontent' when you upgraded and remember the solution?

Re: Wildfire info failed

annielee — Wed, 08 Sep 2021 10:25:01 GMT

Hello again,

Couldnt find the realtime option on our Panorama - 10.0.5, can you share your version ?

Thanks

Re: Wildfire info failed

Joshan_Lakhani — Wed, 08 Sep 2021 10:36:12 GMT

@annielee

Yes in 10.0.5 panorama version. this option is not present.

Re: Wildfire info failed

annielee — Wed, 08 Sep 2021 10:40:00 GMT

can you share which Panorama version will be available ?

Re: Wildfire info failed

Joshan_Lakhani — Wed, 08 Sep 2021 10:50:42 GMT

@annielee

you mean to say that in which version this option is available??? As my panorama version is 10.0.5 .

Re: Wildfire info failed

annielee — Wed, 08 Sep 2021 10:56:29 GMT

erm, you mentioned previously if we changed the Schedule to Realtime, the alerts will stopped.

can you share did you configure on the firewall itself and not panorama wildfire schedule ?

as we are still getting the alerts every minute ..

Re: Wildfire info failed

Joshan_Lakhani — Wed, 08 Sep 2021 10:59:33 GMT

@annielee

On firewall you can disable it. As this option is not available on panorama.

Re: Wildfire info failed

annielee — Wed, 08 Sep 2021 11:01:20 GMT

But as per TAC, this message is from Panorama with regards to the Wildfire updates and not from the Firewall itself.

Re: Wildfire info failed

Joshan_Lakhani — Wed, 08 Sep 2021 11:05:46 GMT

@annielee

As these system log comes from firewall that send to panorama. So it's show on panorama. you can test once you select the real time on firewall. It's will not send to panorama.

Re: Wildfire info failed

annielee — Wed, 08 Sep 2021 11:10:07 GMT

thanks, let me chnage to RealTime for all our firewalls.

Re: Wildfire info failed

philipp_scherer — Mon, 27 Sep 2021 18:44:13 GMT

Same issue here. We did an upgrade of Panorama and all firewalls to 10.0.7.

I found this thread and set all firewalls to receive WF updates in real-time.

The error message disappeared for the firewalls as expected. Unfortunately Panorama is still facing the error message:

Any ideas?

Re: Wildfire info failed

rivanov — Fri, 08 Oct 2021 20:31:44 GMT

I have same messages from panorama every minute and no way to set it for real-time. Time to open a ticket....

Re: Wildfire info failed

MP18 — Sun, 19 Dec 2021 05:20:29 GMT

Hi Team,

I had same issue on M200 running 10.1.3.

I was getting emails every minute.

Fix is you need to go to log settings and put this filter under system high

(severity eq high) and not (description contains 'Retrieving Content \'WildFire\' info failed with error \'No records found\'' )

Regards

Re: Wildfire info failed

johan.boeckx — Sun, 10 Apr 2022 21:33:59 GMT

We have the same problem here. We have Panos 10.0.8. By moving from 15 minutes to real time, the error "Wildfire info failed" disappeared and the error 'WFRTSIG: Unknown error" and "Failed to connect to wildfire-realtime cloud, retry after 30 seconds" now and then.