question about panorama and proxy server

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

question about panorama and proxy server

L1 Bithead

Hi,Bro The customer's network environment does not have direct access to the Internet, but wants panorama to update the contents and software of the managed firewall device through a proxy server. So the proxy server is configured to allow access to updates.paloaltoneytworks.com. We found that only updates.paloaltoneytworks.com is released on the proxy server, and panorama cannot obtain the license of the managed firewall, so it is impossible to update the contents and software of the managed firewall through panorama. what other domain names should be allowed ?

1 REPLY 1

Cyber Elite
Cyber Elite

Thank you for the post @miaocongcong

 

while "updates.paloaltonetworks.com" should be enough to fetch license, below domains are still required to allow downloads through proxy or 3rd party device:

 

proditpdownloads.paloaltonetworks.com
downloads.paloaltonetworks.com

 

Here is a reference: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/software-and-content-updates/content-deli...

 

If after adding these domains, the error is still presented, I would start looking into logs: less mp-log configd.log

 

Kind Regards

Pavel

Help the community: Like helpful comments and mark solutions.
  • 1613 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!