Machine Learning engine for Phishing stopped, please update your content

Showing results for 
Search instead for 
Did you mean: 

Machine Learning engine for Phishing stopped, please update your content

L1 Bithead


From yesterday(26.05.2021) in two independent environments on the firewall I can see messages: "Machine Learning engine for Phishing stopped, please update your content".

Does anyone have a similar problem and know how to fix it?




L1 Bithead

We are seeing the same alerts.  I've been digging all morning trying to find any information available on this and coming up empty so far.  Confirmed all content/signatures are updated to most recent versions.


Engine keeps starting, runs for about 9 minutes, and then stops and generates the alerts.

L0 Member

Have seen the same myself after I updated last night.  Anyone found a resolution? 

L1 Bithead


I have VM-100, PAN-OS 10.0.1 in my lab, after upgrade signatures as below I started receive these messages. It's looks like problem with Dynamic Updates.


sw-version: 10.0.1
app-version: 8410-6722
av-version: 3728-4239
threat-version: 8410-6722
wildfire-version: 562165-565281
url-filtering-version: 20210527.20191
logdb-version: 10.0.2






L1 Bithead

Same issue just started here with our 220 HA pair running 10.0.5.

Have received a stop, restart, and another stop within 15 min window.

L1 Bithead

Looks like it is resolved for us now.  Last "stopped" messages were received at 2:31pm EST and all of the FWs last reported the engine starting.  Nothing overly interesting in the system logs that looked different from previous connections to the update server or any content update delivery.  

I too have not had any further stops.
...fingers crossed

Spoke too soon...
Machine Learning engine for Phishing stopped, restarted, stopped...

L0 Member

I've been getting this for 2 days now.  I'm getting flooded with emails about this once every 5 minutes.


Machine Learning engine for Phishing stopped, please update your content

Machine Learning engine for Phishing started

Cyber Elite
Cyber Elite

Upgrade to the latest 10.6 version as 10.x is still new and prone to issues.



In the Masterd log there could be some info for the process rebooting, also check if the managment plane has a log with the same name as the process name that you see in  Masterd log  if not check in the GUI the system log. Also monitor your dataplane and managment plane CPU and the memory as it could be memory or cpu leakage bug. You may use the Palo Alto chrome extension for better monitoring:



Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!