topic Re: PAN-DB cloud list loading failed (ERROR:SSL connect error in Next-Generation Firewall Discussions

PAN-DB cloud list loading failed (ERROR:SSL connect error

S.Ramesh960545 — Mon, 17 Feb 2025 01:28:43 GMT

The active firewall is connected while the passive is not connected. In that case sometimes we getting,

PAN-DB cloud list loading failed (ERROR:SSL connect error

I believe we can ignore this error message if it's getting the error once in awhile since it could be failed due to SSL connectivity error to Palo Alto update server.

The concern is it because of passive firewall is not connected ?

Re: PAN-DB cloud list loading failed (ERROR:SSL connect error

mshekh — Mon, 17 Feb 2025 02:12:18 GMT

Hi @S.Ramesh960545 ,

IF passive device management interface doesn't have internet access then you will see this message, however if you have internet connection via management interface then you have to check in path if there is anything blocking the traffic.

Re: PAN-DB cloud list loading failed (ERROR:SSL connect error

S.Ramesh960545 — Mon, 17 Feb 2025 02:27:19 GMT

Hi, are you talking about the error log message or for the

> show url cloud status, output

Re: PAN-DB cloud list loading failed (ERROR:SSL connect error

mshekh — Mon, 17 Feb 2025 03:14:44 GMT

Hi @S.Ramesh960545 ,

Both error logs and show url-cloud status output, what status do you see with running the command show url cloud status and do you see any error in system logs.

Re: PAN-DB cloud list loading failed (ERROR:SSL connect error

S.Ramesh960545 — Mon, 17 Feb 2025 04:23:42 GMT

The system log error PAN-DB cloud list loading failed (ERROR:SSL connect error

can only be seen in active firewall.

> show url cloud status (active)

PAN-DB URL Filtering
License :                          valid                                   
libcurl resolver :                 threaded                                
Current cloud server :             serverlist.urlcloud.paloaltonetworks.com
Cloud connection :                 connected                               
Cloud mode :                       public                                  
URL database version - device :    20250203.20043                          
URL database version - cloud :     20250203.20043  ( last update time 2025/02/03 10:30:54 )
URL database status :              good                                    
URL protocol version - device :    pan/2.0.0                               
URL protocol version - cloud :     pan/2.0.0                               
Protocol compatibility status :    compatible

> show url cloud status (passive)

Re: PAN-DB cloud list loading failed (ERROR:SSL connect error

mshekh — Mon, 17 Feb 2025 05:52:29 GMT

Hi @S.Ramesh960545 ,

Thanks for sharing the output as currently passive device is not connected to cloud due to that you are getting the error.

Looks like passive device doesn't have internet access via management interface due to that you are seeing the error..

You may check with failover traffic to passive device as if you are using data interface in service route to connect internet then it's expected..

Re: PAN-DB cloud list loading failed (ERROR:SSL connect error

PavelK — Mon, 17 Feb 2025 23:53:10 GMT

Hello @S.Ramesh960545

could you have a look into below KBs:

HA passive device keeps making failed PAN-DB cloud connection

Why Does the PAN-DB Version Not Update on the Passive Firewall?

Kind Regards

Pavel

Re: PAN-DB cloud list loading failed (ERROR:SSL connect error

nohash4u — Mon, 14 Apr 2025 16:49:27 GMT

Hi @PavelK ,

Do those two articles not contradict each other? The first states that after PAN-OS 9.0 the expected behaviour of the passive unit is to receive a URL DB cache sync from the active unit, and not connect to the PAN-OS cloud itself, while the second states the error is a result of a devsrvr process being stuck in a loop on the passive unit.

Any clarity is greatly appreciated!

Re: PAN-DB cloud list loading failed (ERROR:SSL connect error

PavelK — Mon, 28 Apr 2025 01:42:21 GMT

Hello @nohash4u

thank you for message.

I agree that each of the KB is describing different issue and they do not seem to have any relation to each other. I think, the section of "Additional Information" from KB: "HA passive device keeps making failed PAN-DB cloud connection" should be removed to avoid confusion.

Kind Regards

Pavel

Re: PAN-DB cloud list loading failed (ERROR:SSL connect error

nohash4u — Tue, 29 Apr 2025 19:52:22 GMT

Thanks for clarifying!