While deploying updates from Panorama to managed devices, the install fails with the error: "No matching contents package found in panupv2-all-apps-XXX-YYYY".
Diagnosis
While deploying updates from Panorama, the panupv2-all-apps-XXX-YYYY was deployed instead of panupv2-all-content-XXX-YYYY.
panupv2-all-apps-XXX-YYYY is to be deployed/installed on Panorama and Log Collectors, or firewalls not subscribed to a ThreatPrevention license. Panorama and Log collectors do not need the threat database; application-only database is sufficient.
panupv2-all-contents-XXX-YYYY is to be deployed/installed on managed firewalls with a Threat Prevention license, which includes both Application and Threat Signatures.
Environment
Any Panorama
Content Updates.
Resolution
Deploy only content packages to firewalls from Panorama, and not just the apps package.