Wildfire Not Downloading

[apackard]

We have around a dozen firewalls licensed for WildFire (technically they are on the 1 month trial while we arrange to deploy our paid-for licenses - which might impact the following question..)

The issue I have is that 1 firewall is now about a day behind the others with downloads because, every time it performs an update check it comes back with - no "updates found".  In addition, if I try to download the updates to Panorama so I can push the latest update to the dodgy unit, it to is reporting no new updates.

Is this a known problem, maybe with the licenses they are using no being 'reliable'?  How can I force an update if the update check just says 'no updates found' when we know there are some.

Eveything else (Apps, Threats etc) are working fine for the unit, and Wildfre updates to the others are OK, so it's not a connectivity issue.

Thanks

[panos]

I have never seen a problem about wildfire download.is there anyhting special you observed different for that firewall ? Because the problem is specific for just that FW, maybe restarting some services, maybe at last completely the fw will trigger something....

[Phoenix]

Hello Apackard,

From the discussion I see that wildfire content downloads are lagging by a day on one device and other devices are fine.

> Is the one delay lag being constantly maintained ? That is tomorrow if we check the other firewalls are on latest and this specific one device is one day old (as of today )?

> What is the frequency of auto download and install ? Is it hourly ?

> What has been seen or found in the ms.log / devsrv.log / varrcvr.log at the time of auto download is attempted ?

less mp-log ms.log

> "show wildfire status" - Does it show it is registered and connected to the cloud.

These should give us a direction.

[apackard]

Hi - as of about an hour ago the box had re-syn'd and was on the same release as the other units - after a period of at least 12 hours where it hadn't updated at all.

Prior to this it has simply stopped updating, but the system log showed it was checking and reporting that no new updates were available, while all other devices were keeping up to date.

We have the schedule set at every 15 minutes, starting at 10 past.  This was because I noted that updates most regularly seem to be released at 20 past and 50 past the hour, so we'd 'normally' update at 25 and 55 past (i.e. within 5 minutes of release), and then have a second bite 15 minutes later (so no more than 20 minutes behind).  This seems to work well and helps keep everything in sync and up-to-date (it looks like any other activity at the scheduled time - commit's, EDB refresh, AV\App\Threat downloads etc can stop it completing).

Currently however it has started lagging again (3 versions behind, whereas we only normally see a max of 1).  I'll monitor and check the logs to see if I can see anything.

Note also this is a passive box in a HA pair, so it's 'partner' is the live unit and seems OK, so I don't think it's a load issue etc.