Dynamic apps and threats update failed for pattern 8510

[SBDC]

We're running a PA-820 physical FW at software level 9.1.12-h3.

I tried to manually update the apps and threats pattern published this morning (as we only update daily and it was published about 30 minutes after our system automatically checks).

Downloading the pattern works fine, but when I try to install it, it gets to about 49%, then slows down massively, gets to about 59% progress and crashes (see screenshot below).

No idea what address "CE" is supposed to be, I can't find it anywhere. Pattern 8509 was fine...

Is the pattern/download corrupt, or is there something else to check?

[PavelK]

Thank you for the post @SBDC

I just tried to install: 8510-7171 in two different Firewalls and I could install it without any error. Could you please try to restart management process: debug software restart process management-server and try again?

Kind Regards

Pavel

[SBDC]

Sadly no, that did not make a difference. Even re-downloaded the pattern.

[SBDC · Accepted solution]

Okay, found the problem. We had a policy rule that included a lot of regions, and it appears "CE" (Crimea) is no longer valid as of pattern 8510.

Once I removed the region from the policies it was in, it compiled fine. Bit odd that Palo Alto did not document a removal of a region in the release notes.

[PavelK]

Thank you for reply @SBDC

I see, thank you for sharing. I just checked on my side and I can see the same. After installing 8510-7171 Crimea is no longer there.

Kind Regards

Pavel