Update problems, PANOS 4.0.5

[Soporte.Arteria]

Hi, I need some help about a PAN update trouble, since december of last year can't update all the signatures of threats, APP's, url filtering and antivirus.

On the dynamic update section, when checking for new version, shows an error:

Failed to check content upgrade info due to generic communication error. Please try again later.

When I'm testing the conection using CLI console, I make a ping and a traceroute to the update url (updates.paloaltonetworks.com) and both are successfully completed, then, I try to get the updates via CLI commands, and result are the same as the web interface:

Failed to check content upgrade info due to generic communication error. Please try again later.

I checked the licences and product support, and everything it's ok, all is activated and the licences still are valid.

Please Help me to understand what is the problem and what need to solve this issue.

I have a PAN 4020 using PANOS 4.0.5

Thank's.

[mikand]

One way would be to update to 4.1.2 and try again.

Another method is to manually download the updates (for url, threats, apps) and install them through the gui by later manually upload them to your PAN unit and then see if the autoupdate starts to work?

Also if you are using a regular interface for the updates (and not the mgmt-interface) I think you might need to setup a security policy which allows "paloalto-updates" (limit it to the zone and srcip used by the PAN itself). This can be verified if you check in the ACC right after you had your failed update.