No devices in deploy content window

[Rick-Olsen]

I am having a problem trying to push Apps&Threats or AV from the panorama to the firewalls. We have a Panorama M100 at 8.0.5 (recently upgraded from 6.1.10) with 5020 FW's at same release. We are NOT able to do the reachback to Palo Alto servers since we are a segregated testing network. When i go through the process to push the Apps&Threats or the AV updates there are no devices listed in the Devices section (no filters applied). I can go to Managed Devices and see the FW's connected and in sync. I have tried both paths to push the updates. 

I can modify the device templates and have them committed and pushed to the fw's. I can update the FW's manually. 

Is the reachback now a requirement for the deployment? 

Is this a known Issue, i tried searching for it but don't get anything.

[Remo]

Did you maybe download the apps and threats update and now you're trying to install this update on a firewall without threat prevention license?

[Rick-Olsen]

I can manually update the FW's with the same package. I grab the Apps only package for the Panorama and the Apps&Threats for the firewalls that have support. It is looking like the support license is not on the Panorama. Without the Support license (or reachback) the panorama can't do deployments.)

Thanks though.

[Rick-Olsen · Accepted solution]

The issue as it turns out is the offline status of the panorama and firewalls. Since these systems do not have reachback capability the Mandatory license check fails. The support engineer said it was a Known issue. The manual update on each firewall works so i have a path to keep the systems updated but definitely not happy that Palo Also doesn't have a process of offline license updates/checks.