Unable to download updates

[peteunderwood10]

I have a PA-200 running 6.1.14.

I am able to generate a list of software updates, global protect clients and the dynamic updates, but when I attempt to download any of the files, I get the following error:

Failed to download due to network failure. Please try again later.

Failed to download file

I have the update server set to the IP address instead of the host name. I have also tried adjusting the service route configuration (setting Palo Updates to use my external interface, setting a destination rule for the IP address of the palo update server to use the external interface). None of this has worked.

Thanks for any advice/suggestions.

[TranceforLife]

Hi,

confirm if you can actually get to the servers by running PCAP on the box and the below CLI commands:

> ssh port 443 host updates.paloaltonetworks.com 

> ping host downloads.paloaltonetworks.com

For further details on "updates.paloaltonetworks.com" and " downloads.paloaltonetworks.com" review the following functions:

• updates.paloaltonetworks.com allows software downloads and licenses retrieval
• downloads.paloaltonetworks.com allows dynamic updates to download

Cheers,

Myky

[pcaphunter]

If you haven't recently try clicking on "check now" to refresh the updates before attempting to download.  I have had some issues on the Software section previously trying to download an update already in the list.  Once I hit refresh I was then able to download the version on a second try.