topic Re: 11.1.4h7 and 11.1.5 h1 high cpu in Next-Generation Firewall Discussions

11.1.4h7 and 11.1.5 h1 high cpu

chens — Sat, 23 Nov 2024 08:23:29 GMT

Ugraded 11.1.4h1 to 11.1.4h7 On PA440 and PA415, causing high both planes cpu.

rolled back to 11.1.4h1 fixed

Upgraded to 11.1.5h1 - same issue.

Rolled back to 11.1.4h1.

Re: 11.1.4h7 and 11.1.5 h1 high cpu

naardes — Mon, 25 Nov 2024 07:56:29 GMT

Hello everyone,
I have exactly the same problem.

Update from 11.1.4-h1 to the preferred release 11.1.4-h7 with a PA440 firewall cluster (active/passive).

Immediately after the update I had almost 100% CPU on the management plane on both firewalls.

At first I thought that it might be related to some background tasks after the update and left it like that for 24 hours and observed it. To no avail, the CPU load remained very high.

I then downgraded both firewalls to version 11.1.4-h1 and immediately afterwards everything was fine again. The CPU load is now back to its usual low level.

I'm surprised that no one else has reported this error...

Best regards,
naardes

Re: 11.1.4h7 and 11.1.5 h1 high cpu

chens — Mon, 25 Nov 2024 10:52:57 GMT

TAC claims issues have been verified and a fix will be published soon.

Re: 11.1.4h7 and 11.1.5 h1 high cpu

naardes — Mon, 25 Nov 2024 11:54:08 GMT

@chens

Thank you for the information.

Re: 11.1.4h7 and 11.1.5 h1 high cpu

EduRamirez — Tue, 03 Dec 2024 16:58:49 GMT

I have the same issue.

Re: 11.1.4h7 and 11.1.5 h1 high cpu

EduRamirez — Tue, 03 Dec 2024 17:00:29 GMT

Could you let us know when the issue is fixed or when you have any new information?

Re: 11.1.4h7 and 11.1.5 h1 high cpu

chens — Tue, 03 Dec 2024 17:25:44 GMT

I have been told by TAC that 5.12 they will deploy fix.

Re: 11.1.4h7 and 11.1.5 h1 high cpu

EduRamirez — Tue, 03 Dec 2024 20:36:02 GMT

Thanks a lot!

Re: 11.1.4h7 and 11.1.5 h1 high cpu

chens — Fri, 06 Dec 2024 11:22:12 GMT

installed 11.1.6 which is claimed to solve the CPU issue.

Issue this there.

Just unbelievable.

Re: 11.1.4h7 and 11.1.5 h1 high cpu

chens — Fri, 06 Dec 2024 11:23:49 GMT

PAN-273215

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-addressed-issues

Re: 11.1.4h7 and 11.1.5 h1 high cpu

S.Sivan — Tue, 24 Dec 2024 10:20:35 GMT

Anyone tried 11.1.4-h9? Seems like bug fix is there for PAN-273215

Re: 11.1.4h7 and 11.1.5 h1 high cpu

sasc — Mon, 30 Dec 2024 12:02:58 GMT

Even in PanOS - 11.1.4-h9, we are facing the high MP CPU spike often.

Re: 11.1.4h7 and 11.1.5 h1 high cpu

JimMcGrady — Mon, 24 Feb 2025 05:44:00 GMT

Is this also seen in the 10.1 releases? We've had peak periods of high cpu since going to 10.1.14-h8 on a PA-3250.

Re: 11.1.4h7 and 11.1.5 h1 high cpu

chens — Mon, 24 Feb 2025 11:37:36 GMT

The bug is\was PAN-273215

and it fixed in 11.2.4

You need to check if it was also in 10.1 i haven't checked.

Re: 11.1.4h7 and 11.1.5 h1 high cpu

naardes — Tue, 04 Mar 2025 06:43:11 GMT

Hello everyone,
with version 11.1.4-h9 things got a bit better for us, so we were using version 11.1.4-h9 until recently.

The current preferred version 11.1.6-h3 has completely solved the problem for us. With version 11.1.6-h3 the CPU usage on our devices is completely normal again.

For your information.

Greetings Naardes

Re: 11.1.4h7 and 11.1.5 h1 high cpu

zahmed01 — Tue, 04 Mar 2025 16:44:13 GMT

Hello,

The current preferred version for 11.1.x is 11.1.6-h3 which has a range of addressed issues that have been fixed listed here.

Thanks,