Cant upload Wildfire update after manually activating the license

[ChirPatel]

Cant upload Wildfire update after manually activating the license, we are getting ready for PA migration (replacing old PA with with new) hence new PA firewalls are not connected to live environment and doesn't have internet connectivity. config was transferred using XML import / export.

All the subscriptions are activated on the new PAs and dynamic up uploaded manually using web interface.  For some reason we are unable to install Wildfire updates using same mechanism. 

We can upload the wildfire update, however when I use install from file option, I am unable to locate wildfire update in the dropdownlist.

These new firewalls has never connected to internet or PaloAlto network for that reason, can this be the reason?

[akannadhasan]

Hello ChirPatel, 

As you have mentioned that the file was uploaded manually to FW via GUI, try installing the same through CLI using the following command.

"request wf-content upgrade install file <use tab>". 

Using tab as mentioned on the above command should list out the version, that you have manually uploaded via GUI. Check and install the same if the uploaded version is listed out. Kindly refer to the below KB article.

https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/set-up-and-manage-a-wildfire-appliance...

Hope this would help.

[ChirPatel]

Thanks for your message, however this I couldn't install the wildfire update via CLI...

I couldn't use this command "request wf-content upgrade install file <use tab>"   as PAN-OS 10.1.3 doesn't recognise "wf-content" as valid command

[akannadhasan]

Hi, 

Thank you for your response.

Please check with the below command,

request wildfire upgrade install file <use tab>

[ChirPatel]

Thanks for this, unfortunately, this command fails as well, In the meantime I got confirmation from PaloAlto Support and they identified this as a system bug !!!!

[akannadhasan]

Please share the bug ID, and also the fix version suggested by Palo alto support, if possible. This may be useful to someone who is dealing with a similar issue.

Thank you in advance.

[ChirPatel]

They didn't provide this information, it was verbal confirmation over the phone from PA Support, having said that over the weekend we connected the Firewall to the internet, as soon as it was connected to Paloaltonetworks usingthe internet things started working.

[ChirPatel]

one thing I noticed which is different now (since internet connectivity)  in the  "show wildfire status" command output 

Before   

Device registered: No 

Now: (since Internet Connectivity)

Device registered: Yes 

I may be guessing may be it required device status as registered?

[akannadhasan]

Hi,

There are multiple reasons for observing "device registration: no" status in the "show wildfire status" command output. 

Kindly refer to the below article addressing the same.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oMCYCA2&lang=en_US%E2%80%A...