Application and Threat update failing

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Application and Threat update failing

L1 Bithead

hi,

 

I am trying to update my content (Application and Threat) under Dynamic update, however it is continuosly failing with the below error,

Enqueued Dequeued ID Type Status Result Completed
------------------------------------------------------------------------------------------------------------------------------
2019/02/07 19:43:17 19:43:17 125645 Content FIN FAIL 19:43:24
Warnings:
Details:Failed to update content with following message: encfilesize is 47069424
No matching apps package found in panupv2-all-contents-8120-5288.tgz
exiting with 255

 

-Till now, I have performed the following steps for updating this VIA CLI however no luck;

 

Resolution

A license fetch will trigger a content update and a forced license update can be achieved with the following commands:

> request license fetch

 

Download and install the content:

> request content upgrade check

> request content upgrade download latest

> request content upgrade install version latest

--------------------------------------------

 

Thank you.

 

 

16 REPLIES 16

Cyber Elite
Cyber Elite

can you try deleting you content packages and redownloading?

 

> delete content update *

 

(this will not touch the installed package)

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Having the same problem here on our M-500 running 8.1.6. Deleted all content and av packages, redownloaded latest and get this output from the install job:

Failed to update content with following message: encfilesize is 47107248
No matching apps package found in panupv2-all-contents-8122-5298.tgz
exiting with 255

--
Working with Palo Alto Networks products since 2015

try deleting all, then perfoming a 'check' and only then downloading and installing a fresh package

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Still get the same error. Going to provide tech support and open case. Will update the community if TAC has a fix

--
Working with Palo Alto Networks products since 2015

Turns out our Panorama had too many licenses assigned to it... namely the Threat Prevention, GlobalProtect Gateway and Autofocus licenses. This causes the Panorama to try to download the app/threat content package that firewalls use instead of just the apps package that Panorama uses. You can manually download the apps from the customer service portal and upload to the Panorama as a workaround in the meantime. 

--
Working with Palo Alto Networks products since 2015

Hi

Any solution for this issue ?

 

 

L1 Bithead

Hello, 

In my case:

Problem 

Offline deployment (Panorama with no access to the Internet)

Error MSG-

Warnings:
Details:Failed to update content with following message: encfilesize is 53118240
No matching apps package found in panupv2-all-contents-8263-6055.tgz
exiting with 255

-Panorama PANOS version 9.0.2-h4. esxi 

What we try:

License was there but we re imported from the Sup portal. - did not help

Restart of the management plane - did not help

Removing all the other packages and restart of the management plane - did not help

Upgrade from 9.0.2-h4 to 9.0.6 - did not help

 

Solution 

On the final round what we did was 

We re-download the app+threats package from the support portal,

clear all the other packages except the one that was in use

restart of the management plane

re-import the package to the device and install.

That seem to work in our case.

We had a case open with Palo but due to the limited access to the unit, no serious troubleshooting session was done and we also couldn't find anything in the Tech support file.

-----

Last message from Palo engineer that was sent and we didn't try was:

Would you please try to delete the old content cache too and restart device-server and management-server processes after that:
delete content cache old-content

-----
Strange.

 

Thanks,

Eli

 

L1 Bithead

We're having the same issue. We tried all the things detailed in this thread. Then we went so far as to scrub the PA with a factory default and tried the all-apps package before configuring anything else. Still have the issue.

I am on the same boat. No Internet access from my Panorama. How do we fix it offline? 

I am also having this issue, and I have also tried all suggestions in this thread. I spoke with TAC for 2 hours this morning and they're still scratching their heads.  Yesterday I sat on hold for 2 hours listening to repeated reminders to check out the Live Community, because support personnel constantly monitor all posts and provide solutions. The most recent post was almost a year ago, and I see no signs of TAC assistance. Not feeling the love.

L1 Bithead

Hi @Tadzio , What Model and software version are you running?

L0 Member

The problem is because there is a conflict of expired licenses with new valid licenses. Expired licenses must be removed with the command:

 

> delete license key "expired license"

 

Previous (not current) versions of content updates must be removed.
The content update must then be downloaded from the Customer Support Portal and manually imported and installed on the device.

L1 Bithead

i am too having this issue. I have deleted the certificates, tried everything in this thread and others.

redownloaded the licenses, cleared content, deleted files only for a manual update for the only thing that works.

 

Sometimes it will automatically download content files and refuses to install them

it wont download antivirus or install them.

 

Getting tired of going through this manual process.

 

This was supposed to be fixed in 9.1.15.

 

Very frustrating.

 

 

L2 Linker

Cordial greetings

Team

Has anyone managed to solve the problem? I have exactly the same problem and I have not been able to solve it.

  • 26934 Views
  • 16 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!