Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.
Hello,
When i download the PAN-OS or content update getting below error:-
Troubleshooting performed from my side:-
Can Any one suggest on this what i need to check.
Solved! Go to Solution.
Thank you.
Once i uncheck the verify server identity and delete previous PAN-OS version after that i can able to download software.
How did you check the connectivity between the mgmt interface and the internet? Is the connection traversing another firewall where may be tls decryption is enabled? Did this suddenly stop working or was it never working? Do you have a dns server configured? If there is another firewall or even the same make sure the traffic is allowed and either tls decryption disabled or then the checkbox at "check update server identity".
@vsys_remoPlease find the answer below:-
How did you check the connectivity between the mgmt interface and the internet?- I can able to ping google.com and 8.8.8.8 through management interface.
Is the connection traversing another firewall where may be tls decryption is enabled? - No decryption policy is configured.
Did this suddenly stop working or was it never working? - I think, the last content update downloaded before 8 months.
Do you have a dns server configured?- Yes
If there is another firewall or even the same make sure the traffic is allowed and either tls decryption disabled or then the checkbox at "check update server identity". - Checkbox is checked in verify server identity.
As per your info seems all is configured correctly.
This type of error normally comes if any firewall in path is doing ssl decryption and on this PA verify update server identity is checked.
1>>Can you please verify what you have configured under update server?
See if you can ping updates.paloaltonetworks.com
2>>Also if you verify and test number 1 then only thing i can say is uncheck the verify server identity
Regards
MAhesh
as mentioned above, have you checked if URL filtering is maybe blocking (or presenting a 'continue') your dynamic updates
this one may sound silly, but have you tried hitting the 'check now'
last resort (try the silly one first)
debug swm rebuild-content-db
Thank you.
Once i uncheck the verify server identity and delete previous PAN-OS version after that i can able to download software.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!