AV version confusion

[DavePalo]

Hi all,

I have a HA pair (A/P) of PA-500s and one of the devices seems to be giving mixed messages about the version of the AV definitions in use.  This has been the case for a couple of weeks now.

It is not causing problems as such, but it is not right either.  If anybody can advise on how I can get our PA-500 to report correctly it would be appreciated! 

Please see below where the mismatch message and general window seem to contradict each other.

It suggests 1637-2114 is installed here too...

...and the log seems to suggest that is was installed but then says it failed.

If I change something in the policy and perform a commit then the mismatch will go away.

Any help appreciated!

Many thanks,

Dave

[HITSSEC]

dyoung,

While your settings are correct and the AV version should be the same on both appliances occassionally we have seen the file transfer (AV updates) not being successfully pushed across to the peer.  Sometimes you may have to force a config synchonization or when you do your next commit it wil be pushed accross to the peer.

Hope this helps,

Phil

[DavePalo]

Hi Phil,

Thanks for your reply.

The strange thing is that the AV updates always got pushed to the peer device and installed fine.  I think our situation was the opposite way around to yours in that the peer device was reported to be running more recent AV defs than our active unit.

Fortunately though this issue seems to have gone away since the weekend.  We haven't made any changes or rebooted the unit, it just started working again.  Very odd.

Thanks,

Dave