Unable to download Dynamic Updates/

[UAMSITSEC]

So, has anyone run into an issue with downloading Dynamic Updates? We are curently running a pair of PA-4060's in active/passive mode, with PAN-OS Software version 3.1.9. I have configured the firewalls to download only and sync to peer both the Application and Threat signatures everyday at 1800 and the Antivirus signatures every hour on the hour. The URL Filtering signature is configured for download and install everyday at 0100.

Currently, the primary unit shows new content available for both App/Threats and Antivirus. After initiating a download of either, and selecting synchronization with HA Peer, the status goes from "Processing" to "Failed" after a few seconds. The details claim that another download is in progress, and to try again later. Might tis be a bug in the v3.1.9 codebase? We are looking to move up to v4.x.x, but probably in within the next six months. We are able to manually download from the PA website the sig files and manually upload and install them to both appliances without any issues.

Thoughts, ideas, solutions perchance? Thanks.

[UAMSITSEC]

@its@fscj.edu - Yes, we do have our campus DNS servers defined under the Device tab - Setup.

@mikand - At the moment, the manual download and importation of the signature files from the https://support.paloaltonetworks.com web portal is the only way we can update signatures. What is broken is under  the Device tab, Dynamic Updates link on the left pane of the page, and the scheduled options to check and/or download the latest signature files.

[sjamaluddin · Accepted solution]

Hello

If your message says a download is in progress, have you been able to go to the CLI and to check for any previously pending downloads?

>Show jobs all

should show you that info.

If you have any pending downloads - check the date and if you find that it is from some time ago, please clear that job ID

> clear job id <jobid #>

Once that is done, try the manual download and if that works and completes, any future downloads should work.

[UAMSITSEC]

@sjamalluddin - that turned out to be the fix. You beat me to posting it, but thank you and everyone else for taking the time out to assist me with this issue. It looks like the 4.1.x code has a option where it will allow you to monitor jobs and their status from the gui. Everyone have a great weekend!!

[mrajdev]

There is a fix for the download process showing pending status for a long time in 4.1.2 and 4.0.8.With the fix the previous workaround is not needed.

Thank

[rodrigum]

Any chance of that fix being ported to 3.1?