Bringing a OSS live (remotely)

[djmac]

I’m deploying 3 global units all with On Site Spares and I am looking for advice on the best base config for the OSS so I can bring them into operation with minimal local hands and so I can load the config remotely – Anyone done this before?

Thanks

[jnguyen]

below is a document on the oss

https://live.paloaltonetworks.com/docs/DOC-1442

[GNS_Support]

I'm working with djmac... here's some more info for you...

I have 4x OSS boxes. They are currently 3.08 with no dynamic updates on them.

How can I build one up to match the software version of the promary box (running 3.1.6)?

The OSS box will not update from the website, as it says it doesn't have a support licence.

I have downloaded the software for 3.1.0 and 3.1.6, but the upgrade fails, stating a newer threat db is needed.

So I downloaded the threat and AV files to upgrade locally, but I get the following error:

content update failed with the following messages: Failed to unbundle file /opt/pancfg/mgmt/content-images/panupv2-all-contents-222-823

There MUST be an easier way to build up an OSS box to match the current running versions of the Primary box??

[James · Accepted solution]

Hi There,

You'll need to upgrade the Apps only - please be sure to pick the 3.0.x bundles (sounds like you're choosing 3.1.x packages).

Then upgrade to 3.1.0

Then to 3.1.6

Then updates Apps again.  Choose Apps ONLY, as you will not have a license for threat.

You have my number, so call me if needed

Thanks

James