When Dynamic Updates Version 8634-7663 is downloaded, commit does not work.

[JoHyeonJae]

Hello all,

I have downloaded Dynamic update version 8634-7663, but the commit function does not work.

Is there any bug about Dynamic Updates Version 8634-7663

Thanks,

[Adrian_Jensen]

That is an interesting observation. On one of my PA3020s the 8634-7663 update downloaded but failed to install this morning. On another the PA it downloaded and installed normally. I haven't been able to find a specific cause yet, I was waiting for the next Apps&Threats update.

Is the failed install case on a HA pair? On our it was.

[JoHyeonJae]

@Adrian_Jensen 

In my case, we are using PA-3200 series, I just downloaded 8634-7663 but did not install it.

The commit fails with the message that the application ntp-base does not exist.

[Adrian_Jensen]

@JoHyeonJae 

I just double checked... it actually failed to install on my stand alone 3020, the HA pair 3020 installed normally. I am not finding any errors related to ntp in my logs, just:

10/25/2022 6:01:01	Content version 8634-7663 downloaded by Auto update agent
10/25/2022 6:01:01	Content job enqueued. Enqueue time=2022/10/25 06:01:01. JobId=10826.  . Type: Full
10/25/2022 6:01:01	Content job started processing. Dequeue time=2022/10/25 06:01:01. Job Id=10826.
10/25/2022 6:01:07	Content package downloaded but installation could not be scheduled
10/25/2022 6:01:07	Failed to upgrade Content package to version <unknown version>

Unfortunately I can't force an install or make changes to the firewall at the moment. I will have to wait until tomorrow night to make try debugging. Perhaps the update package is corrupted? Delete and re-download the package?

[JoHyeonJae]

@Adrian_Jensen 

Thank you for your prompt reply.

As you advised, I will try to delete and download it again.

[Adrian_Jensen]

Applications&Threats update 8635-7675 was released last night and my PA that wouldn't install 8634- had no issues with 8635-.

[PavelK · Accepted solution]

Hello @JoHyeonJae

FYI,  Palo Alto has released KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kEt8CAE

for the commit error: "application 'ntp-base' not found".

Kind Regards

Pavel

[Z.Syed]

Hello there, From where can I find and download content version 8635 or greater.  I am trying to add new device into my Network Environment. I am unable to upgrade the latest version of PANOS.  I was able to up grade up to version 10.0.10. But not able to upgrade to 11.0.0. It is giving me Error: Upgrading from 10.2.10-h7 to 11.0.0 requires a content version of 8635 or greater.
I can not find the content version of 8635.

Please advise.

Thanks in advanced.

Zafar Syed

[PavelK]

Hello @Z.Syed

here is the video tutorial for dynamic update: Video Tutorial: How to schedule Download and Install of Content Updates and here for manual update: Video Tutorial: How to Manually Download and Install the Content Updates. Alternatively the content update is available in Customer Support Portal under: Updates > Dynamic Updates:

You can download latest content update version from support portal, then manually upload it to Firewall and install it.

Regardless you choose dynamic or manual way you need valid support license: When is a support subscription required.

Kind Regards

Pavel