Not able to view Anti-Virus updates under dynamic updates

[tamilvanan]

Hi Team,

We are having PA-3050 and had renewed our license recently. 

When checking under Dynamic updates we are not able to see the Anti-Virus update column.

Also under the Security Profile we are getting an display as Url-filtering license and Threat Prevention license as expired.

We had checked the Advanced URL filtering license and also the Threat prevention license and it is renewed and the subscription is active.

We are able to update the Anti-Virus via CLI command line and on the CLI we are able to see on the Dashboard the latest version installed on the firewall but still the Anti-virus update is not visible on the firewall.

We have the latest App and threat updates installed on the firewall and logged onto the firewall using the default super-admin "admin" account the firewall is able to access Palo Alto update server but still we are facing this issue and on the Security profiles also it is shown as expired.

Also we are not able to manually upload the Anti-virus file downloaded from the Support portal. There is no option showing for the Anti-virus file upload.

Thanks in advance

Failed to download dynamic updates Dynamic Updates - Clientless VPN Anti-Virus version continues to not match after device update FW can not update anti-virus signature. 

[OtakarKlier · Accepted solution]

Hello,

Looks like the PAN doesnt have the newest license files. Go to the Device tab -> Licenses (Retrieve license keys from license server).

This requires that the PAN managing interface can get to the internet. You can perform an 'offline' license update if you use the auth codes.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNACA0

Regards,

[tamilvanan]

Hi @OtakarKlier ,

Thanks for responding to the query.

The firewall had valid Support , Advanced-URL-Filtering, Threat prevention license. We also checked it via the CSP account 

We had already manually uploaded the license on to the firewall which can be seen from screenshot attached to my questionnaire.

This is very strange issue and not sure what had caused this.

We had rebooted the firewall and checked but no luck then we had done factory reset of the firewall and logged into the firewall and the issue is resolved.

Then we had loaded the license manually again and installed dynamic updates and the Anti-Virus section is visible under dynamic updates.

Before doing the above we also checked the latest App & Threat updates are installed and it is present on the firewall.

Not sure what had caused this issue but it is resolved after performing factory reset of the firewall.

Regards,

Tamil

[Gaurav.Singh]

I was stuck with the similar issue, I downloaded and installed the latest Application and Threats package and it fixed the issue. It refreshed and then Antivirus dynamic update option was available. 

Thanks

[S.Cantwell]

@Gaurav.Singh  you are correct.  On a brand new FW, you sometimes need to load the Threat license (which is just Spyware and Vulnerabilities) and do a separate refresh to get the Antivirus.  Been like that for 10+ years.  Thanks for the confirmation.  😛

[NickAssar]

Just went through this.  New PA 410 firewalls, came with 10.2.4, upgraded to 10.2.8.  Installed the advanced threat license, antivirus would not show up.  Installed the latest threats, still antivirus would not show up.  Manually pushing the antivirus package from Panorama worked, but new/old versions still would not show up in the dynamic updates list.

Downgraded the firewalls to 10.1.13, installed the latest threats package again and immediately old/new antivirus packages showed in the dynamic update list and I was able to install after that and set the auto-install schedule.

It's incomprehensible how terrible these firewalls have become after 9.1.  10.2 is like shooting yourself in the foot.  10.1 is slightly better but still littered with known issues that have been around for years.  It's no wonder 9.1 keeps getting pushed back on it's EOL cycle, its the only stable branch they have.  Unfortunately these new models can't use it and we are stuck relying on bugged versions.  Even their KB on this issue doesn't work (https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004NOKCA2).