IoT Security works randomly, but mostly doesn't connect properly when I check EAL connection or ICD connection

jaimechieng — Mon, 28 Nov 2022 02:34:56 GMT

I am working on trialing IoT Security without Cortex Data lake license to see what kind of behavior my IoT devices are doing and see what policies are recommended. I was able to set it all up and see policy recommendations, but it randomly seems to stop working. This is seen on 10.1.8 and 10.2.3 where all connections show failed even though at some point it all worked. Seems to think I have no valid device certificate when I actually do. I've opened a ticket with support on this as well, but wanted to put this out there and see if someone else has encountered and figured out how to resolve. Thanks.

{"level":"error","time":"2022-11-27T21:30:24.884658325-05:00","message":"[DPI]Failed to connect server [tcp]e583764b-53cd-49d2-9397-c79dc1317c8b.fei-lc-prod-us.gpcloudservice.com:443, 192.168.255.1:33185 -> 34.72.73.79:443 err context deadline exceeded"}
{"level":"error","time":"2022-11-27T21:30:28.644513802-05:00","message":"failed to load default cert. err :fail to load client cert[/opt/pancfg/mgmt/lcaas/ssl/lcaas.pem], err open /opt/pancfg/mgmt/lcaas/ssl/lcaas.pem: no such file or directory"}
{"level":"error","time":"2022-11-27T21:30:28.645110352-05:00","message":"[DPI]Failed to connect server [tcp]e583764b-53cd-49d2-9397-c79dc1317c8b.fei-lc-prod-us.gpcloudservice.com:443, -> err Device certificate not present"}
{"level":"error","time":"2022-11-27T21:31:03.659997578-05:00","message":"timeout reached, context is done"}
{"level":"error","time":"2022-11-27T21:31:03.660304307-05:00","message":"[DPI]Failed to connect server [tcp]e583764b-53cd-49d2-9397-c79dc1317c8b.fei-lc-prod-us.gpcloudservice.com:443, 192.168.255.1:35834 -> 34.72.73.79:443 err context deadline exceeded"}
{"level":"error","time":"2022-11-27T21:31:03.952831259-05:00","message":"failed to load default cert. err :fail to load client cert[/opt/pancfg/mgmt/lcaas/ssl/lcaas.pem], err open /opt/pancfg/mgmt/lcaas/ssl/lcaas.pem: no such file or directory"}
{"level":"error","time":"2022-11-27T21:31:03.953588705-05:00","message":"[DPI]Failed to connect server [tcp]e583764b-53cd-49d2-9397-c79dc1317c8b.fei-lc-prod-us.gpcloudservice.com:443, -> err Device certificate not present"}
{"level":"error","time":"2022-11-27T21:31:38.97048009-05:00","message":"timeout reached, context is done"}
{"level":"error","time":"2022-11-27T21:31:38.970754962-05:00","message":"[DPI]Failed to connect server [tcp]e583764b-53cd-49d2-9397-c79dc1317c8b.fei-lc-prod-us.gpcloudservice.com:443, 192.168.255.1:57627 -> 34.72.73.79:443 err context deadline exceeded"}
{"level":"error","time":"2022-11-27T21:31:39.144032029-05:00","message":"failed to load default cert. err :fail to load client cert[/opt/pancfg/mgmt/lcaas/ssl/lcaas.pem], err open /opt/pancfg/mgmt/lcaas/ssl/lcaas.pem: no such file or directory"}
{"level":"error","time":"2022-11-27T21:31:39.146695603-05:00","message":"[DPI]Failed to connect server [tcp]e583764b-53cd-49d2-9397-c79dc1317c8b.fei-lc-prod-us.gpcloudservice.com:443, -> err Device certificate not present"}

admin@BlueBox> show device-certificate status

Device Certificate information:
Current device certificate status: Valid
Not valid before: 2022/11/26 11:13:27 EST
Not valid after: 2023/02/24 11:13:27 EST
Last fetched timestamp: 2022/11/26 11:23:32 EST
Last fetched status: success
Last fetched info: Successfully fetched Device Certificate

Re: IoT Security works randomly, but mostly doesn't connect properly when I check EAL connection or ICD connection

jaimechieng — Mon, 28 Nov 2022 02:35:33 GMT

I am running a PA-220 on version 10.2.3 currently.

topic IoT Security works randomly, but mostly doesn't connect properly when I check EAL connection or ICD connection in Cloud NGFW for AWS Discussions

IoT Security works randomly, but mostly doesn't connect properly when I check EAL connection or ICD connection

Re: IoT Security works randomly, but mostly doesn't connect properly when I check EAL connection or ICD connection