When Dynamic Updates Version 8634-7663 is downloaded, commit does not work.

[JoHyeonJae]

Hello all,

I have downloaded Dynamic update version 8634-7663, but the commit function does not work.

Is there any bug about Dynamic Updates Version 8634-7663

Thanks,

[Adrian_Jensen]

That is an interesting observation. On one of my PA3020s the 8634-7663 update downloaded but failed to install this morning. On another the PA it downloaded and installed normally. I haven't been able to find a specific cause yet, I was waiting for the next Apps&Threats update.

Is the failed install case on a HA pair? On our it was.

[JoHyeonJae]

@Adrian_Jensen 

In my case, we are using PA-3200 series, I just downloaded 8634-7663 but did not install it.

The commit fails with the message that the application ntp-base does not exist.

[Adrian_Jensen]

@JoHyeonJae 

I just double checked... it actually failed to install on my stand alone 3020, the HA pair 3020 installed normally. I am not finding any errors related to ntp in my logs, just:

10/25/2022 6:01:01	Content version 8634-7663 downloaded by Auto update agent
10/25/2022 6:01:01	Content job enqueued. Enqueue time=2022/10/25 06:01:01. JobId=10826.  . Type: Full
10/25/2022 6:01:01	Content job started processing. Dequeue time=2022/10/25 06:01:01. Job Id=10826.
10/25/2022 6:01:07	Content package downloaded but installation could not be scheduled
10/25/2022 6:01:07	Failed to upgrade Content package to version <unknown version>

Unfortunately I can't force an install or make changes to the firewall at the moment. I will have to wait until tomorrow night to make try debugging. Perhaps the update package is corrupted? Delete and re-download the package?

[JoHyeonJae]

@Adrian_Jensen 

Thank you for your prompt reply.

As you advised, I will try to delete and download it again.

[Adrian_Jensen]

Applications&Threats update 8635-7675 was released last night and my PA that wouldn't install 8634- had no issues with 8635-.

[PavelK · Accepted solution]

Hello @JoHyeonJae

FYI,  Palo Alto has released KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kEt8CAE

for the commit error: "application 'ntp-base' not found".

Kind Regards

Pavel