Can't update Global Protect through the NGFW (5.1.1 - 5.1.5)

[Marc.Luecke]

Hi,

I have the problem that, running GP 5.1.1 I get the message that there is a newer GP Version (5.1.5) available.

But when I try to update, the update is not working.

The Debug Log shows:

(T8312)Info  ( 604): 07/08/20 07:41:15:329 #### updater started, command is C:\Users\[...]\_temp3356.msi

(T8312)Debug (  39): 07/08/20 07:41:15:329 try verify file C:\Users\[...]\_temp3356.msi

(T8312)Error ( 165): 07/08/20 07:41:15:334 The file C:\Users\[...]\_temp3356.msi is not signed or corrupted

(T8312)Error ( 634): 07/08/20 07:41:15:334 file did not signed by us, return now

Until now, I could not figure out what goes wrong.

Maybe someone had the problem earlier and can help out?

Best regards,

Marc

[BPry]

@Marc.Luecke,

Is this on every machine that you attempt to upgrade or just one particular machine? 

[Marc.Luecke]

Hi,

it seems to be just this Client in particular..

Best regards,

Marc

[BPry]

@Marc.Luecke,

I would simply delete that temp msi file and force the agent to re-download the update from the gateway.

[Marc.Luecke]

Hi,

thanks for the answers so far.

For now, we have several other Clients with the same problem.

I tried to activate and use GP Client Version 5.1.3 but it shows the same behavior as mentioned before.

Maybe someone has additional thoughts about that?

Best regards,

Marc

[Marc.Luecke]

@BPry 

I tried that but unfortunately the problem still occurs.

[Marc.Luecke]

Hi everyone.

I got a solution from PAN for this one.

As the GP Client (in this particular Case) could not resolve the GP Portal FQDN through the VPN tunnel, the update failed.

The solution was to create an entry on the internal DNS Server that resolved the Portal Name to the corresponding IP.

After that, the update finally was possible.

Maybe someone comes around with the same problem and can find the solution here.

Best regards,

Marc