07-10-2022 09:13 PM
Hi，Bro The customer's network environment does not have direct access to the Internet, but wants panorama to update the contents and software of the managed firewall device through a proxy server. So the proxy server is configured to allow access to updates.paloaltoneytworks.com. We found that only updates.paloaltoneytworks.com is released on the proxy server, and panorama cannot obtain the license of the managed firewall, so it is impossible to update the contents and software of the managed firewall through panorama. what other domain names should be allowed ？
07-10-2022 11:09 PM
Thank you for the post @miaocongcong
while "updates.paloaltonetworks.com" should be enough to fetch license, below domains are still required to allow downloads through proxy or 3rd party device:
Here is a reference: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/software-and-content-updates/content-deli...
If after adding these domains, the error is still presented, I would start looking into logs: less mp-log configd.log
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!