"System error" message seen when trying to ping using FQDN

• The system error message is seen when trying to ping using FQDN.

  admin@Lab48-169-PA-VM> ping host updates.paloaltonetworks.com
  ping: updates.paloaltonetworks.com: System error

   

• Palo Alto Networks Firewalls
• Supported PAN-OS
• DNS

• This issue indicates that the  firewall is experiencing DNS resolution failures. This in turn prevents dynamic content updates.
• The issue is caused from various causes, including incorrect DNS configuration, network connectivity problems to DNS servers or update servers.

One needs to ensure the DNS resolutions are working fine to resolve the problem. One or more of the following should help

1. Correct the DNS configuration.
2. Correct the network connectivity issues for DNS Server.
3. Check if the firewall is manually configured with static DNS entries or getting DNS entries via DHCP. In this case the manual entries should take precedence.
4. If static DNS entries are pushed from panorama, try to do a local override in the firewall and see if this fixes the issue.
5. If the issue continues, contact Palo Alto Support for assistance.