PA 440 dynamic updates

[S.Byrne]

I am installing a PA 440 v 10.1

I can ping IP Addresses on the Internet using my internet interface as source

I can https inbound to the firewall after configuring a management profile 

under Device -> dynamic update or license check my attempt at the connection times out 

Q can anyone recommend tests for me to complete to troubleshoot this issue ?

I had packet capture running but after selecting check for updates I did not see any connection initiated from the PA 440 

[JayGolf]

Hi @S.Byrne ,

For a new device, I would double-check the initial config and verify management interface settings (Device -> Setup -> Interfaces -> Management) as well as DNS settings configured (Device -> Setup -> Services). 

Once those settings look good, run a connectivity test on the management interface to the updates server:

ping host updates.paloaltonetworks.com

If connectivity from management looks good and you still cant pull updates, verify firewall registration has been completed and auth codes have been activated. 

[PavelK]

Hello @S.Byrne

from your post I understand you took packet capture on management interface. Could you confirm that Dynamic Updates are indeed set to use management interface and not data plane interface: Setting a Service Route for Services to Use a Dataplane's Interface from the Web UI and CLI.

Kind Regards

Pavel