topic Re: Expedition 1.1.96 Not Downloading PAN-OS Config in Expedition Discussions

Expedition 1.1.96 Not Downloading PAN-OS Config

jkaberna — Tue, 27 Apr 2021 20:32:58 GMT

It's able to download Applications, Regions, etc but is not pulling the running config. This was happening before I did the recent update to 1.1.96. I also tried rebooting and restarting processes. Any ideas which logs I should check to see if I can narrow down the issue?

Re: Expedition 1.1.96 Not Downloading PAN-OS Config

lychiang — Tue, 27 Apr 2021 21:23:22 GMT

@jkaberna Try remove the device completely and re-add the device in.

Re: Expedition 1.1.96 Not Downloading PAN-OS Config

jkaberna — Wed, 28 Apr 2021 18:24:00 GMT

I tried that twice. It didn't help.

Re: Expedition 1.1.96 Not Downloading PAN-OS Config

azuniga — Wed, 28 Apr 2021 18:58:59 GMT

You can see what the error code is within /home/userSpace/panReadOrders.log

sudo cat /home/userSpace/panReadOrders.log

this should say why that issue is happening or if it is even trying to make that type of a query.

Re: Expedition 1.1.96 Not Downloading PAN-OS Config

jkaberna — Thu, 29 Apr 2021 00:30:45 GMT

@azuniga I had checked that previously and there doesn't seem to be any errors.

Re: Expedition 1.1.96 Not Downloading PAN-OS Config

azuniga — Fri, 30 Apr 2021 16:54:25 GMT

Hello @jkaberna

How about within the /tmp/error file do you see anything within this? Sometimes the connections time out especially if you are doing this through a panorama query that has many firewalls. That's why often removing and readding it seems to help.

Re: Expedition 1.1.96 Not Downloading PAN-OS Config

jkaberna — Fri, 30 Apr 2021 17:10:16 GMT

There's no logfile called error in /tmp just panReadOrders.log. I tried deleting and readding 3 times now and it's no change. I'm connecting to the firewall directly and not going through Panorama.

Re: Expedition 1.1.96 Not Downloading PAN-OS Config

azuniga — Fri, 30 Apr 2021 17:13:19 GMT

@jkaberna

Go ahead and shoot a email over to fwmigrate@paloaltonetworks.com and we can set up a time to run a working session.