- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
07-29-2020 07:45 PM
Dear Patrons,
I was attempting to perform the dynamic update (specifically anti-virus update) but I noticed there is no "dynamic update" menu, somewhere I read that M-100 series antivirus update can only be done over CLI, is that true?
Not only the dynamic updates menu missing, except "managed devices", "device deployments" none of the options available under Panorama including the "setup" option.
Need some insight.
07-29-2020 09:04 PM - edited 07-29-2020 09:08 PM
Yes you can do dynamic updated from CLI of Panorama.
Run this command from CLI and do you see antivirus there?
show system info
mac-address: 14:0d:4f:50:10:bc
time: Wed Jul 29 22:01:05 2020
uptime: 32 days, 20:46:26
family: m
model: M-100
serial: 009201002110
cloud-mode: non-cloud
sw-version: 8.1.15
app-version: 8299-6221
app-release-date: 2020/07/28 17:54:44 MDT
av-version: 3424-3935
av-release-date: 2020/07/29 05:00:28 MDT
wf-private-version: 0
wf-private-release-date: unknown
url-db: paloaltonetworks
wildfire-version: 475855-478792
wildfire-release-date: 2020/07/29 21:51:33 MDT
logdb-version: 8.1.8
vmware_nsx: vmware_nsx-2.0.2
platform-family: m
system-mode: panorama
operational-mode: normal
device-certificate-status: None
Run below commands from CLI
request anti-virus upgrade
> check Get information from PaloAlto Networks server
> download Download anti-virus packages
> info Show information about available anti-virus packages
> install Install anti-virus packages
PAN-1(primary-active)> request anti-virus upgrade info
Version Size Released on Downloaded Installed
-------------------------------------------------------------------------
3424-3935 101MB 2020/07/29 05:00:28 MDT yes current
3419-3930 100MB 2020/07/24 05:04:22 MDT no no
3422-3933 101MB 2020/07/27 05:02:06 MDT yes no
3420-3931 101MB 2020/07/25 05:01:00 MDT yes no
3423-3934 100MB 2020/07/28 05:00:21 MDT yes previous
3421-3932 101MB 2020/07/26 05:04:39 MDT yes no
Regards
07-29-2020 09:31 PM
Was it always like this?
Yes you can do from the CLI
Run the command
show system info
Do you see antivirus there?
From CLI try this command
request anti-virus upgrade download latest
other option you can try is
request anti-virus upgrade
> check Get information from PaloAlto Networks server
> download Download anti-virus packages
> info Show information about available anti-virus packages
> install Install anti-virus packages
Regards
07-30-2020 12:10 PM
@MP18 Thanks for the suggestion, there is catch in implementing this plan of action, when I try to SSH into CLI via putty after entering credential the putty session disappears, so I can't update the anti-virus via CLI.
The traffic log shows TCP-FIN under traffic log when trying SSH into CLI.
Also, I noticed the clock is one day behind to actual date, since the"setup" tab not available I can't change that either.
07-30-2020 02:23 PM
Are you trying to ssh to Management IP of Panorama.
Can you try this with admin account?
Seems your access is restricted based on Role based.
You need to login with admin superuser password and then sync the Clock with right NTP server.
Regards
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!