Failing to download GlobalProtect Client

[ssaunders]

I can run Dynamic Updates, but am unable to perform a GP download.  "Getting Failed to download due to server error. Please try again later."

This is for a passive node in an HA setup.  It is a new PAN and this is keeping me from having it go live.  Is there a way to download the GP package from the running PAN and upload it to the passive one?

PAN - 3020

OS = 6.0

[HULK]

Hello,

Could you please verify the SYSTEM logs (Monitor >> System logs) for the same. Also, verify the DNS for the Secondary firewall as the same as the Primary on the Device>Service.

Thanks

[ssaunders]

'Connection to Update server closed' is what the System logs show.

I can see the traffic going through the Active firewall from the management interface of the passive and shows it connecting to 23.193.5.69 (AKAMAI.COM)

[panos]

can you try if these commands work

request global-protect-client software check

any error here or not ?

if list comes then

request global-protect-client software download file PanGP-2.0.0

if issue occurs again

from active device you can use

request global-protect-client software download sync-to-peer yes file PanGP-2.0.0

[HULK]

Hello Panos,

The purgescript.sh file was missing in the root under  /usr/bin directory and the management-client was showing an error for GP license .  Hence, retrieve the license file once again from paloalto-updates server and that resolved the issue.

Thanks

[panos]

Thanks for the information HULK.

Regards

[SatheeshAnirudhan]

Fail to download GlobalProtect Client

Check the following

1. Check Now working for updates
2. download failure happening almost the middle of download
3. System logs no failure download appearing