Application and Threat update failing

[Desa_Bowman]

hi,

I am trying to update my content (Application and Threat) under Dynamic update, however it is continuosly failing with the below error,

Enqueued Dequeued ID Type Status Result Completed
------------------------------------------------------------------------------------------------------------------------------
2019/02/07 19:43:17 19:43:17 125645 Content FIN FAIL 19:43:24
Warnings:
Details:Failed to update content with following message: encfilesize is 47069424
No matching apps package found in panupv2-all-contents-8120-5288.tgz
exiting with 255

-Till now, I have performed the following steps for updating this VIA CLI however no luck;

Resolution

A license fetch will trigger a content update and a forced license update can be achieved with the following commands:

> request license fetch

Download and install the content:

> request content upgrade check

> request content upgrade download latest

> request content upgrade install version latest

--------------------------------------------

Thank you.

[reaper]

can you try deleting you content packages and redownloading?

> delete content update *

(this will not touch the installed package)

[cnygaard]

Having the same problem here on our M-500 running 8.1.6. Deleted all content and av packages, redownloaded latest and get this output from the install job:

Failed to update content with following message: encfilesize is 47107248
No matching apps package found in panupv2-all-contents-8122-5298.tgz
exiting with 255

[reaper]

try deleting all, then perfoming a 'check' and only then downloading and installing a fresh package

[cnygaard]

Still get the same error. Going to provide tech support and open case. Will update the community if TAC has a fix

[cnygaard]

Turns out our Panorama had too many licenses assigned to it... namely the Threat Prevention, GlobalProtect Gateway and Autofocus licenses. This causes the Panorama to try to download the app/threat content package that firewalls use instead of just the apps package that Panorama uses. You can manually download the apps from the customer service portal and upload to the Panorama as a workaround in the meantime. 

[KonradPolakowski_OCD]

Hi

Any solution for this issue ?

[EliSz]

Hello, 

In my case:

Problem 

Offline deployment (Panorama with no access to the Internet)

Error MSG-

Warnings:
Details:Failed to update content with following message: encfilesize is 53118240
No matching apps package found in panupv2-all-contents-8263-6055.tgz
exiting with 255

-Panorama PANOS version 9.0.2-h4. esxi 

What we try:

License was there but we re imported from the Sup portal. - did not help

Restart of the management plane - did not help

Removing all the other packages and restart of the management plane - did not help

Upgrade from 9.0.2-h4 to 9.0.6 - did not help

Solution 

On the final round what we did was 

We re-download the app+threats package from the support portal,

clear all the other packages except the one that was in use

restart of the management plane

re-import the package to the device and install.

That seem to work in our case.

We had a case open with Palo but due to the limited access to the unit, no serious troubleshooting session was done and we also couldn't find anything in the Tech support file.

-----

Last message from Palo engineer that was sent and we didn't try was:

Would you please try to delete the old content cache too and restart device-server and management-server processes after that:
delete content cache old-content

-----
Strange.

Thanks,

Eli

[greg_murphy]

We're having the same issue. We tried all the things detailed in this thread. Then we went so far as to scrub the PA with a factory default and tried the all-apps package before configuring anything else. Still have the issue.

[Ram_Bista]

I am on the same boat. No Internet access from my Panorama. How do we fix it offline? 

[Tadzio]

I am also having this issue, and I have also tried all suggestions in this thread. I spoke with TAC for 2 hours this morning and they're still scratching their heads.  Yesterday I sat on hold for 2 hours listening to repeated reminders to check out the Live Community, because support personnel constantly monitor all posts and provide solutions. The most recent post was almost a year ago, and I see no signs of TAC assistance. Not feeling the love.

[Dash.Ranasinghe]

Hi @Tadzio , What Model and software version are you running?

[EUREKA-NETWORKS]

The problem is because there is a conflict of expired licenses with new valid licenses. Expired licenses must be removed with the command:

> delete license key "expired license"

Previous (not current) versions of content updates must be removed.
The content update must then be downloaded from the Customer Support Portal and manually imported and installed on the device.

[Old-Roo]

i am too having this issue. I have deleted the certificates, tried everything in this thread and others.

redownloaded the licenses, cleared content, deleted files only for a manual update for the only thing that works.

Sometimes it will automatically download content files and refuses to install them

it wont download antivirus or install them.

Getting tired of going through this manual process.

This was supposed to be fixed in 9.1.15.

Very frustrating.

[AndresAlfaro]

Cordial greetings

Team

Has anyone managed to solve the problem? I have exactly the same problem and I have not been able to solve it.