Palo Alto Software Download Failure

I had an error on my PA-200 with PAN-OS 7.0.5 while trying to download a new firmware version. “Error: There is not enough free disk space to complete the desired operation. […]”. Even the tips to delete older software, dynamic updates, etc., and to use the “set max-num-images count” command did not lead to a successful download.

Finally, the TAC support could solve the problem via root access to the Palo Alto firewall and by manually moving data files…

This was the disk space on the firewall before the TAC support corrected it (note the 5th line with 92 % usage):

weberjoh@fd-wv-fw02> show system disk-space

Filesystem            Size  Used Avail Use% Mounted on
/dev/sda3             1.9G  1.5G  393M  79% /
/dev/sda5             6.6G  5.8G  541M  92% /opt/pancfg
/dev/sda6             1.9G  685M  1.2G  38% /opt/panrepo
tmpfs                 1.3G  116M  1.2G  10% /dev/shm
/dev/sda8             2.4G  1.9G  372M  84% /opt/panlogs

And on my monitoring server I could see that the management config partition increased its usage a few weeks ago:

The supporter now used the 

debug tac-login challenge

debug tac-login response

1. He navigated to the folder in which the AV and content packages reside.
2. He moved the “newav” folder to another partition. Now there was enough disk space on the current partition.
3. Via the GUI, he upgraded the content packages. This worked and PAN-OS correctly deleted the temporary content files.
4. He then moved back the AV files (newav) to the original partition
5. and upgraded the AV packages appropriately. This worked, too, and PAN-OS correctly deleted the temporary AV files, too.

Now the usage of /dev/sda5, mounted on /opt/pancfg, was about 73 %:

weberjoh@fd-wv-fw02> exitshow system disk-spacejobs allsystem disk-space

Filesystem            Size  Used Avail Use% Mounted on
/dev/sda3             1.9G  1.5G  391M  79% /
/dev/sda5             6.6G  4.6G  1.8G  73% /opt/pancfg
/dev/sda6             1.9G  685M  1.2G  38% /opt/panrepo
tmpfs                 1.3G  116M  1.2G  10% /dev/shm
/dev/sda8             2.4G  2.0G  330M  86% /opt/panlogs

This is the daily graph of the management config partition which shows the decrease of the space usage during the support call:

After this procedure, I was able to update man PAN-OS to a newer version. Thank you. And hopefully this bug will be fixed in an upcoming version! (Bug number 94106.)