Automatic updates broken?

[RobinClayton]

Anyone else got trouble with Dynamic content updates??

• Failed to download due to generic communication error. Please try again later.
• Failed to download file

[ShaiW]

Hi

Did you try disabling this 'Verify Update Server Identity' under Device->Setup->Services.

I've see proxies that interfered with the update server certificate causing the NGFW to fail to connect.

Hope this helps,

Shai

[Remo]

Hi @RobinClayton 

Do you whitelist the specific domains that the firewalls require to communicate / to download updates ... ?

At least I am doing this and I had the same error since a few days. Today I found out that some firewalls (mainly PA-200 and PA-220) no longer communicate to the url prod.itpdownloads.paloaltonetworks.com as documented here: Content Delivery Network Infrastructure 

Since a few days these firewalls try to connect to proditpdownloads.paloaltonetworks.com. As soon as I opened this URL the downloads were successfull again.

Regards,

Remo

[olethomas]

Hi,

I added "SSL" application to the Palo Alto SW updates rule and everything started working again.

[RobinClayton]

So something has been BROKEN again..

I did think updates were set to the external interface on the service router, but  I may have changed that after the updates were broken back in that autumn (northern hemi)...  With the SR for Palo Networks set on the external interface I am picking up  updates once more..