topic Re: Panorama takes excessive time to complete commit to firewalls, stuck at 50% in Panorama Discussions

Panorama takes excessive time to complete commit to firewalls, stuck at 50%

bkoch709 — Wed, 12 May 2021 15:55:45 GMT

The push to the standby firewall occurs quickly (1-3 minutes).

The push to the active firewall is stuck for a long time. I notice the config does finally get to the active firewall, but Panorama still shows push in progress.

Note in the second picture that the push completed to the standby firewall already, but stuck at the active firewall.

Re: Panorama takes excessive time to complete commit to firewalls, stuck at 50%

S.Cantwell — Thu, 13 May 2021 00:11:57 GMT

Hello there.

In Panorama, you may know that you can Push to Devices and then choose what information to push (either template or device group). I would ask that you Push to Panorama, and then, when you are ready, Push to Devices,

Choose the Edit Selections and push ONLY Templates, see how the length of time.

Then push again, Edit Selection, and now ONLY Device Group.

You can even push to just the Active FW (deselect the Passive)

One of those should help to see why it takes so long...

Re: Panorama takes excessive time to complete commit to firewalls, stuck at 50%

MP18 — Thu, 13 May 2021 23:58:07 GMT

@bkoch709

Are you doing Commit to Panorama and then Push to devices or Commit and Push?

Does Push to the Panorama also takes long time?

Regards

Re: Panorama takes excessive time to complete commit to firewalls, stuck at 50%

bkoch709 — Fri, 14 May 2021 13:44:42 GMT

I am doing a commit and push. The Panorama commit goes just fine.

What we did find was that after the upgrade from 9.1.5 to 9.1.8 on panorama, the check box for "Share Unused Address and Service Objects with Devices" was turned back on.

Re: Panorama takes excessive time to complete commit to firewalls, stuck at 50%

MP18 — Fri, 14 May 2021 15:55:26 GMT

@bkoch709

Yes those settings are fine.

Regards