I recently upgraded to the 4.1 OS from 4.0.1. The firewall settings are fine but for some reason whenever the firewall tries to download any new software like 4.1.1, GlobalProtect, Dynamic Updates it keeps getting the error "Failed due to network failure".
I have checked and made sure that the Managment Interface is not being blocked by URL or Security policies. I even see successful connections to update server but the error still keeps coming up.
Solved! Go to Solution.
From the CLI, test by issuing command 'ping host updates.paloaltonetworks.com'.
Also when you go into Dynamic Updates and Software, do you get any error when you click on 'Check Now' button?
Just to be specific it is in the Operations tab in the Setup section of the Device. The Update server is indeed 'updates.paloaltonetworks.com'
Configuration appears to be fine. You may want to check again to see if the traffic is being blocked upstream. I would suggest collecting a pcap and see.
I've been dealing with this same issue as well. It started with 4.1 for me too.
I can log into the firewall, and force it to update. But sometimes even then it gets stuck, and I have to log into the CLI and cancel the job.
Here's the email error message I get.
SYSTEM ALERT : high : Failed to check Content content upgrade info due to generic communication error
receive_time: 2012/01/17 13:14:20
time_generated: 2012/01/17 13:14:20
opaque: Failed to check Content content upgrade info due to generic communication error
I am seeing similiar effects (4.1.1). I noticed today that an auto scheduled AV download was at 30% for more than a week now. Which must of been effecting the threat content download from starting. URL updates are up to date though. The particular date of over a week ago was also when I found the AV download stuck the first time. After killing the job - I can perform a manual download/install. Seems to happen during the auto scheduled download.
Has there been any update on this? There is more then one person reporting the issue now. I'm still getting the same error message I reported in my previous post.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!