question about panorama and proxy server

[miaocongcong]

Hi，Bro The customer's network environment does not have direct access to the Internet, but wants panorama to update the contents and software of the managed firewall device through a proxy server. So the proxy server is configured to allow access to updates.paloaltoneytworks.com. We found that only updates.paloaltoneytworks.com is released on the proxy server, and panorama cannot obtain the license of the managed firewall, so it is impossible to update the contents and software of the managed firewall through panorama. what other domain names should be allowed ？

[PavelK]

Thank you for the post @miaocongcong

while "updates.paloaltonetworks.com" should be enough to fetch license, below domains are still required to allow downloads through proxy or 3rd party device:

proditpdownloads.paloaltonetworks.com
downloads.paloaltonetworks.com

Here is a reference: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/software-and-content-updates/content-deli...

If after adding these domains, the error is still presented, I would start looking into logs: less mp-log configd.log

Kind Regards

Pavel