Software failed to fetch the PANOS from server

[FarhanKoujalgi]

Hey guys hope you doing well One of my customer have an issue to fetch PANOS version.

PA-220 Current version 10.0.0

The dynamic updates are not up to date as i see the latest  dynamic updates installed on her firewall are month of april 2021.

Also i am not able to fetch the latest PANOS.

I checked the service route and policy for PANOS upgrade.

Also check the internet through CLI by pinging 

Also the device certificate also not able to fetch in his firewall.

I attach the image of device cert pls help me 

Threat,support and wildfire license are valid.

[LAYER_8]

What update server is the MGT port configured to look for? updates.paloaltonetworks.com?

The DNS address configured in the management interface, can you confirm that from the MGT plane (ssh into the box) 'ping host x.x.x.x' is able to reach DNS out?

[BPry]

@FarhanKoujalgi,

As @LAYER_8 mentioned you need to double check the basics. Does this customer use the management interface or have service routes configured? Is it capable of resolving FQDNs, have you verified that the firewall isn't resetting any of the traffic via the firewall's logs? The base image for PAN-OS 10.0 definitely had issues, but not being able to download updates wasn't one of them.

If everything looks good from a traffic and setting standpoint, then I would just upload 10.0.8 and manually install it and see if that fixes the communication issue you are seeing. I wouldn't expect it to, but its worth a shot if you think your configuration isn't the issue.