Panorama M-100 dynamic update menu not present under "Panorama" tab

[Pradeepkumar064]

Dear Patrons,

I was attempting to perform the dynamic update (specifically anti-virus update) but  I noticed there is no "dynamic update" menu, somewhere I read that M-100 series antivirus update can only be done over CLI, is that true?

Not only the dynamic updates menu missing, except "managed devices", "device deployments" none of the options available under Panorama including the "setup" option.

Need some insight.

[MP18]

@Pradeepkumar064 

Yes you can do dynamic updated from CLI of Panorama.

Run this command from CLI  and do you see antivirus there?

show system info

mac-address: 14:0d:4f:50:10:bc
time: Wed Jul 29 22:01:05 2020
uptime: 32 days, 20:46:26
family: m
model: M-100
serial: 009201002110
cloud-mode: non-cloud
sw-version: 8.1.15
app-version: 8299-6221
app-release-date: 2020/07/28 17:54:44 MDT
av-version: 3424-3935
av-release-date: 2020/07/29 05:00:28 MDT
wf-private-version: 0
wf-private-release-date: unknown
url-db: paloaltonetworks
wildfire-version: 475855-478792
wildfire-release-date: 2020/07/29 21:51:33 MDT
logdb-version: 8.1.8
vmware_nsx: vmware_nsx-2.0.2
platform-family: m
system-mode: panorama
operational-mode: normal
device-certificate-status: None

Run below commands from CLI  

request anti-virus upgrade
> check Get information from PaloAlto Networks server
> download Download anti-virus packages
> info Show information about available anti-virus packages
> install Install anti-virus packages

PAN-1(primary-active)> request anti-virus upgrade info

Version Size Released on Downloaded Installed
-------------------------------------------------------------------------
3424-3935 101MB 2020/07/29 05:00:28 MDT yes current
3419-3930 100MB 2020/07/24 05:04:22 MDT no no
3422-3933 101MB 2020/07/27 05:02:06 MDT yes no
3420-3931 101MB 2020/07/25 05:01:00 MDT yes no
3423-3934 100MB 2020/07/28 05:00:21 MDT yes previous
3421-3932 101MB 2020/07/26 05:04:39 MDT yes no

Regards

[MP18]

@Pradeepkumar064 

Was it always like this?

Yes you can do from the CLI

Run the command 

show system info

Do you see antivirus there?

From CLI  try this command 

 request anti-virus upgrade download latest

other option you can try is 

request anti-virus upgrade
> check Get information from PaloAlto Networks server
> download Download anti-virus packages
> info Show information about available anti-virus packages
> install Install anti-virus packages

Regards

[Pradeepkumar064]

@MP18 Thanks for the suggestion, there is catch in implementing this plan of action, when I try to SSH into CLI via putty after entering credential the putty session disappears, so I can't update the anti-virus via CLI.

The traffic log shows TCP-FIN under traffic log when trying SSH into CLI.

Also, I noticed the clock is one day behind to actual date, since the"setup" tab not available I can't change that either.

[MP18]

@Pradeepkumar064 

Are you trying to ssh to Management IP of Panorama.

Can you try this with admin account?

Seems your access is restricted based on Role based.

You need to login with admin  superuser password and  then sync the Clock with right NTP server.

Regards