What is "MLAV: Unknown error" message?
191
Created On 03/08/23 04:20 AM - Last Modified 01/09/26 08:19 AM
Question
The following message was found in the system log: "MLAV: Unknown error".
What does this message indicate?
2025/06/08 12:09:31 medium general general 0 MLAV: Unknown error.
Environment
- PAN-OS 10.2, 11.1, 11.2, 12.0
- MLAV (Machine Learning-based Antivirus)
Answer
- This message is displayed when the response code from the MLAV Cloud is 404.
- If the message appears only temporarily, it can be ignored.
- If the message continues to appear, it indicates connectivity issue to the MLAV Cloud.
- Check the Palo Alto Cloud Service Status Page and contact Palo Alto Technical Support.
Additional Information
Checking the devsrvr.log indicates the 404 response code.
2025-06-08 12:09:32.354 +0900 Error: pan_mlav_process_http_resp_code(pan_mlav_cloud.c:558): Got HTTP resp code 404
2025-06-08 12:09:32.356 +0900 Error: pan_mlav_resp_parser(pan_mlav_cloud.c:822): Server resp code[404], msglen[150], msg:
<html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>openresty</center>
</body>
</html>
2025-06-08 12:09:32.356 +0900 Error: pan_mlav_send_query(pan_mlav_cloud.c:1407): Failed to parse type[3] response
2025-06-08 12:09:32.356 +0900 Error: pan_mlav_get_metadata(pan_mlav_cloud.c:1669): Failed to send metadata query
2025-06-08 12:09:32.356 +0900 Error: pan_mlav_check_model(pan_mlav_cloud.c:1907): Failed to get metadata from cloud
2025-06-08 12:09:32.356 +0900 Error: pan_mlav_req_handler(pan_mlav_cloud.c:2029): meta download s_connection_tries [22]
2025-06-08 12:09:32.356 +0900 Error: pan_mlav_req_handler(pan_mlav_cloud.c:2047): s_connection_tries [22], query[good], upload[good], meta[bad]
2025-06-08 12:09:32.356 +0900 MLAV cloud error, will try in 15 minutes