Which domain should be whitelisted for Panorama device deployment download?

Which domain should be whitelisted for Panorama device deployment download?

4359
Created On 05/08/23 19:04 PM - Last Modified 12/18/24 22:35 PM


Question


  • Panorama is used to deploy software on the connected Firewalls.
  • When trying the device deployment (Panorama > Device Deployment > Software > Download), the software download fails.
  • Which domain should be whitelisted for Panorama to download the device deployment software?

Environment


  • Any Panorama
  • PAN-OS 10.x and above
  • Device Deployment

Answer


  1. Palo Alto Networks update server uses Akamai CDN. 
  2. Akamai CDN uses dynamic IP addresses,
  3. Instead of doing a whitelist for IP address, whitelist the domain for akamai, which is proditpdownloads.paloaltonetworks.com on the necessary devices.

Additional Information


Configuration of Update Server when Static Update Server is used

 
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kHqMCAU&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language