PaloAlto and Cisco Scansafe Proxy

[dtran]

I have a PaloAlto PA-200 with very simple configuration. I configure the PA-200 Management interface to get update the Antivirus, Threats, WildFire and URL Filtering. The proxy server is Cisco scansafe. I can update software, dynamic updates, license everything through the proxy server from the PAN-200 with the Exception of of the PAN-DB for URL filtering. Every time I tried to update the PAN-DB, I get this message: Please select a region to begin the download process 2016-04-16 13:00:17 PAN-DB download: Finished with failure url-download-failure 'The download file for region North-America md5sum check failed Btw, it happens for ALL regions, North America, APAC, Japan, Russia. Not sure what else to do from here? TAC engineer is not very helpful here. Anyone know how to fix this?

[Brandon_Wertz]

Have you tried bypassing SSL or exempting the PAN-DB URL for updates from even going to ScanSafe?  (Our remote users also use ScanSafe)

[dtran]

got the issue resolved. 

Stupid PaloAlto upgrade the Application & Threats to 578 and broke PAN-DB update.  Upgrade to 579-3281 fixes the issue.

Nice work Palo Alto for breakiny my URL Filtering