App version mismatch

[BTS_MS]

Hi All,

My dashboard shows a "App Version Mismatch" in a HA setup. The active is supposed to download the app version and sync it to the passive.

To confound the issue as per the following the "active" firewall is running the older version causing the mismatch:

admin@(active)> show high-availability all | match Application

      Application Content: 327-1497

      Application Content Compatibility: Mismatch

      Application Content: 328-1503

However the following shows active is running the latest version:

admin@(active)> show system info | match app-version

app-version: 328-1503

So HA is saying the active firewall is running a older app version than it actually is. Any hints on how to go about correcting this situation?

Many thanks!

[bjdraw]

We're having the same problem. Is it possible to restart the management plane without contacting support?

[sdurga]

you can restart management server yourself. Its not going to cause any traffic interruption. You can do this via command "debug software restart management-server". Once you do this you will be logged out of the device, please re login and check if that resolved the issue.

Sandeep T

[mikand]

Is this really true?

I mean if you use userid and a new user tries to setup a session then this user will not be allowed until mgmtplane is back on track and can answer the dataplane which user is using the specific ip (which the dataplane then will case for the TTL one have set)?

Also if using SSL-termination then SSL-based traffic will be blocked (new sessions) because the MITM cert is being created by the mgmtplane on some models (at least on the PA2000-series)?

And finally you will lose log-entries during the time mgmtplane is offline?

So already established traffic shouldnt be affected, but new sessions might be affected (depending on if you use userid and/or ssl-termination).

[psd.paadmin]

Restarting the management plane did not work for.!!

For the peer that is behind and is erroring when attempting a manual install:

A bit drastic but I read somewhere on the KB that backing up your configuration, reinstalling the PAN OS then installing the AV or App threat update will fix it.

[bjdraw]

Restarting the management plane worked for us and we didn't notice any interruptions.