Inability to Download GlobalProtect Client from Firewall

[Jatin.Singh]

We are currently attempting to update our globalprotect client on our Palo Alto firewall, a PA-500. The version we are attempting to download is 5.0.8.

Currently when attempting to download we get the following error

Which hasn't given us much indication of what the issue is, and how to rectify it.

We have checked the logs in an attempt to find additional information, which has given us the following information

administrator@PA-500> tail follow yes mp-log ms.log

2020-03-19 16:43:01.287 +1100 client dagger reported op command was SUCCESSFUL

2020-03-19 16:43:04.840 +1100 No upload information available

sh: -o/tmp/pan/downloadprogress.10006: No such file or directory

grep: /tmp/pan/downloadprogress.10006: No such file or directory

NO_MATCHES

2020-03-19 16:43:06.623 +1100 Error:  pan_jobmgr_downloader_thread(pan_job_mgr.c:1110): DOWNLOAD job failed

NO_MATCHES

We have also tried the following.

- Restarting the Management Plane, with no change

- Attempted to download PAN-OS 7.1.25 (currently running PAN-OS 7.1.5) which seems to fail with the same message

- Changed the Service Route for PA updates to e1/5, with no change.

- Tried a tcpdump from the management plane when clicking 'Download' but could not spot the traffic (1x port 443 tcpfump filter, 1x all traffic - pcaps attached)

There doesn't appear to be any dropped sessions in the pcap so we currently don't think it's our upstream firewall.

[kiwi]

Hi @Jatin.Singh ,

Perhaps a disk space issue ?

The PA-500 isn't known for its amount of disk space 🙂

Check with the following cli how much space you have available:

> show system disk-space

Hope this helps,

-Kiwi.

[reaper]

hi @Jatin.Singh 

this is most likely, as @kiwi indicated, a disk space issue :https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaJCAS

try clearing out disk space and try again

if that still fails, try manually uploading 7.1.25, install and reboot