updates.uswest2.gslb.paloaltonetworks.com

[DonohoeRobert]

Hi Team, 

Has the update server changed for dynamic updates ? updates.paloaltonetworks.com showing generic communication errors. A ping to updates.paloaltonetworks.com resolves to the address in the title, when ye change it in the config [device>setup>services>update server] connects again fine.. 

admin@TAC-HomeLab> ping source 10.10.20.1 host updates.paloaltonetworks.com
PING updates.uswest2.gslb.paloaltonetworks.com (52.37.195.67) from 10.10.20.1 : 56(84) bytes of data.

know about the article below, when the update server config is updates.paloaltonetworks.com won't connect, allow all from that IP, no sec profiles. 

https://live.paloaltonetworks.com/t5/Management-Articles/Unable-to-Perform-Dynamic-Updates-with-quot...

changing it to the one in the title connects again fine, only when ye unselect the checkbox to verify update server... 

new one

Cheers

Rob 

[reaper · Accepted solution]

updates.paloaltonetworks.com does not reply to ping, it is a cloud address that resolves to a server geographically closest to you, the update server FQDN itself has not changed and is still (and will always be) updates.paloaltonetworks.com 

If you're seeing generic communcations errors there might be local peering/routing or dns issues

If you connect to that sub-server the verification will fail as the server will authenticate as updates.paloaltonetworks.com but you are addressing it by it's unique FQDN