Since 03/April/2017 02:00 Firewall detect paloalto-updates application as SSL then firewall can't update new signatures because there is no SSL allow in policy.This problem occur to my 3 customer now.
Do anyone have the same problems?
@chinitsara wrote:Me too. I found pan-update application changed to SSL . It occur in PANOS 6.1.x but PANOS 7.1.8 is show pan-update normally and i add SSL application for work around.
although this does appear to be a problem and should be addressed as soon as possible, a more elegant solution may be to use an Application Override policy.
out of curiosity, though. for those that are experiencing the issue, if you go to Objects -> Applications and look up the palo-updates app, does it still say ssl is implicitly used? if not, that would be the problem.
ETA: apparently the implicit field isn't shown in 6.x, but hopefully this will work from the command line in configure mode
# show predefined application paloalto-updates | match implicit
