Apps and Threats 578-3263 *URGENT* *SOLVED*

[Jack_Howells]

We have had a few issues with customers and their network when upgrading to the latest Apps and Threats update.

Can anyone comment on this at all?

A few examples of issues are that decryption is not working, and communication to the LDAP server was lost. Sessions are closed with the error message "resources unavailable".

Regards

Jack

[pmc]

This brought down mail for our entire organization. Only SMTP was affected but it left a lot of users unhappy.

[Jack_Howells]

I can confirm that all of the customers that reported an issue to us today were using the 3000 series firewalls.

Thanks for the info.

[TheRealDiz]

Hi @Jack_Howells,

I know that 578 it was removed by PA .. I was busy with customers.

I just want to share with you, my experience with this issue 😛

Probably in future we need to pay attention with Content Update and PANos version.. Cause today with 7.1.0 update 578 works fine.

In order to avoid an important business impact on enviroments .. I have spent a lot of hours during this morning just to understand this behavior and cause of issue.

I hope this was helpful.

Ciao

Luca

;)))))

[Brandon_Wertz]

Not trying to absolve Palo of the issues here, but there is the option to delay the install for up to 5 days.  I haven't been keeping track of timelines as to when the update was reverted, so I'm not sure if this option would have helped anyone in this scenario.

Just an option for people out there.

[jdprovine]

I was surprised that the notification from palo didn't come out quicker, they are usually very good about that. I have a 5050 and didn't have any issues but I also got 578-3267 not 3260

[jdprovine]

not 578-3263 I mean

[MattWakim]

We had this same problem and reverted as soon as the issue was found. Waiting for their reasoning. 

[TheRealDiz]

Hi all,

One of my customer asking if there is a way to receive PA update related to this kind of issue.

I have received this e-mail as partner:

---------------------------------------------

Dear Customer,

With Applications and Threats Content version 578, Palo Alto Networks received reports that customers running PA-3000 series devices may experience an issue with resource exhaustion on their firewalls. To address these reports, Palo Alto Networks has temporarily removed this content update while we investigate the root-cause.

We advise that content version 578 not be installed on PA-3000 series devices, and to revert to 577 if this has already been done. Palo Alto Networks will release an update once this has been resolved.


-Palo Alto Networks Customer Support

-----------------------------------------------

Customers wants this e-mail directly from Palo Alto but he didn't receive it yet.

There are a lot of customers that received this one, but not all customers.

Suggestions?

Is that related to their setting on PA account?

Best Regards

[ulti]

It seems to have been sent to at least email addresses we have in customer portal...

[Brandon_Wertz]

Any users on our support account get them if the boxes below are checked....Not sure about merely having an account on the community site:

[TheRealDiz]

Thanks @Brandon_Wertz

I suppose right.. Customer didn't flagged it haha 😉