System Alert:Failure to check wildfire content upgrade

Showing results for 
Show  only  | Search instead for 
Did you mean: 

System Alert:Failure to check wildfire content upgrade

L1 Bithead

In last two days, I started getting system alerts that says "SYSTEM ALERT : high : Failed to check WildFire content upgrade info due to generic communication error" and another that says "SYSTEM ALERT : high : HA Group 1: Anti-Virus version does not match" from PA-3020 HA pairs. the HA alerts comes always at 1:31am.  The system's health seems ok and auto updating  regularly from PA.

I am new to PA firewalls so I would appreciate any body can tell me what may be the issue.

thank you


Accepted Solutions

Please open a case with support for further investigation.

View solution in original post


I would guess that you have configured an automatic update Scheduler for 1:30 am (or may be a little bit earlier)

Depending on your configuration the Master is updated first and then the Update is pushed to the slave

So depending on how long it would take to commit the AV Update there may be a small time frame

where you have a mismatch in AV Versions.



L5 Sessionator

Hi awarsame,

From what I understand, the PANFW cannot connect to the wildfire server, and thats why we get the "Failed to check WildFire content upgrade info due to generic communication error". Can you change the update server to "" to see if it makes a difference. ( device tab--> setup--->services )

With regard to the Anti-Virus version does not match issue, verify if the HA pairs havent been configured to download and/or install the version at the same time. The recommended steps is to keep at least a 30 minute time difference, for the download and/or install 30 mins,between both the firewalls. Also verify that the "Enable config Syn" check box is clicked under the HA settings ( device----> high-availability-----> general)

You can also use the command:

request high-availability sync-to-remote running-config



I have seen these errors in the past when there are DNS resolution issues.

Is the DNS server that is in Device > Setup > Services working correctly?

Can you ping a FQDN and have the DNS resolve an IP?


I tried both of these update servers and I am still getting the wildfire upgrade failure errors.  it is not all the time. it succeeds after multiple tries.

Please open a case with support for further investigation.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!