Unable to manually upload dynamic content

[ldormond]

Hello,

I am currently working on a new PA-3020 deployment. The device has been delivered with old PanOS 5.0.6 release. Also I would like to upgrade it to last PanOS 6.0.x release before going ahead with configuration.

The device has currently no access to Internet, also I have to manually upgrade the device. In order to achieve this, I firstly have to upgrade to PanOS 6.0.0 base image, then to last PanOS 6.0.x release.

According to the PanOS 6.0.0 RN, the device must be running dynamic content 401 or later. Also I downloaded the last dynamic content file from the PaloAlto Networks portal (apps 489-2600).

I try to upload the file from the WebUI Device --> Dynamic Content. I click on Upload, and then choosing Content from the drop-down list (only one choice), browse for my file, and finally click OK.

I get always this error :

I have also tried with the oldest file I can download from the PaloAlto portal (apps 454-2355) but it results in the same issue.

I also tried with the all content file (all-contents 489-2600) and I get the same error.

The current application definition on the device is 320-1459. Do you think this app definition is far to old ?

Regards,

Laurent

[gbogojevic · Accepted solution]

When you try to upload the file the full path 'C:\pa\panupv2-all-apps-489-2600' is being passed to the Firewall as the update file name, and that extra 'C:\pa' is what is throwing off the management server. This problem is more common in Internet Explorer so using a different browser could also fix it - please try with some other browser (some browsers are passing the full path to the pa as the content file name).

You can also take a look this doc: https://live.paloaltonetworks.com/docs/DOC-2740

[ldormond]

Hi,

Many thanks for your help on this weird issue !

Indeed, disabling this feature in IE makes the upload work. (I had no chance to try with another browser since the customer infrastructure is very constrained).

I didn't find this doc, despite having browsed the PaloAlto support community for a while. Furthermore, the PanOS 5.x Admin Guide states that

The following web browsers are supported for access to the firewall web interface:

• Internet Explorer 7+

• Firefox 3.6+

• Safari 5+

• Chrome 11+

Maybe the "for access to the firewall web interface" makes all the difference

Regards,

Laurent