03-06-2014 12:23 PM
I can run Dynamic Updates, but am unable to perform a GP download. "Getting Failed to download due to server error. Please try again later."
This is for a passive node in an HA setup. It is a new PAN and this is keeping me from having it go live. Is there a way to download the GP package from the running PAN and upload it to the passive one?
PAN - 3020
OS = 6.0
03-06-2014 01:18 PM
Could you please verify the SYSTEM logs (Monitor >> System logs) for the same. Also, verify the DNS for the Secondary firewall as the same as the Primary on the Device>Service.
03-06-2014 01:27 PM
'Connection to Update server closed' is what the System logs show.
I can see the traffic going through the Active firewall from the management interface of the passive and shows it connecting to 220.127.116.11 (AKAMAI.COM)
03-08-2014 02:59 PM
can you try if these commands work
request global-protect-client software check
any error here or not ?
if list comes then
request global-protect-client software download file PanGP-2.0.0
if issue occurs again
from active device you can use
request global-protect-client software download sync-to-peer yes file PanGP-2.0.0
03-08-2014 05:13 PM
The purgescript.sh file was missing in the root under /usr/bin directory and the management-client was showing an error for GP license . Hence, retrieve the license file once again from paloalto-updates server and that resolved the issue.
03-08-2014 08:27 PM
Thanks for the information HULK.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!