App version mismatch.

[JitinMarwah1]

Hi All,

My Active panorama dashboard shows a "App Version Mismatch" in a HA setup. The active is supposed to download the app version and sync it to the passive.

New App version is downloaded to active panorama but not installed as per scheduled and for passive is showing downloaded and installed. 

It should be sync to peer correct? Can some one help please.

[PavelK]

Hello @JitinMarwah1

have you enabled in primary-active Panorama under Panorama > Dynamic Updates > Application and Threats Update Schedule > Action: download-and-install and Sync To Peer checkbox?

Kind Regards

Pavel

[JitinMarwah1]

Hello @PavelK,

Yes, it is enabled in primary-active Panorama.

[PavelK]

Hello @JitinMarwah1

thank you for reply!

Does your secondary-passive Panorama have valid support license?

In secondary-passive Panorama could you navigate to the right bottom corner, then click on "Tasks". When new window opens, are you able to see Content update jobs completed?

Kind Regards

Pavel

[JitinMarwah1]

Hello @PavelK ,

Hope you are doing well today,

Does your secondary-passive Panorama have valid support license?

Yes, Checked secondary-passive Panorama is on valid license

In secondary-passive Panorama could you navigate to the right bottom corner, then click on "Tasks". When new window opens, are you able to see Content update jobs completed?

Yes, Jobs are completed. Attaching the snaps of primary and secondary Panorama. I have check system logs, Task jobs but didn't see any failed message for APP version. 

Regards,

Jitin

[PavelK]

Hello @JitinMarwah1

thank you for reply.

Based on your screen shot it looks like that content update job has completed successfully. Despite the fact that it has completed successfully it is not flagged as currently installed version? At this point I would probably try to restart secondary-passive Panorama management process.

Kind Regards

Pavel

[JitinMarwah1]

Hello @PavelK ,

Hope you are doing well today.

Yesterday, When i replied here i saw afterwards it got resolved with new release. Both Primary and Secondary are in sync today. Still dont know what cause that issue. We are dealing with bigger issue that still are not resolved after hot fix upgrade to 11.1.4-h1 - Palo Alto case - 03129636: Inconsistency in the Panorama logs. Panorama web interface intermittently displays logs or fails to display logs completely.

If you have any resolution or suggestion please help us over here.

Regards,

Jitin