topic Re: Panorama messages. in Panorama Discussions

Panorama messages.

Sourav_Saha — Mon, 10 Aug 2020 16:59:59 GMT

hi.

Any idea why panorama suddenly started sending this messages a lot

opaque: gRPC connection to iot.services-edge.paloaltonetworks.com:443 is broken, error: fail to parseTlsCert, err fail to load client cert[/root/client.pem], err open /root/client.pem: no such file or directory time: 2020-08-10 10:53:30

and how to fix this ?

Thanks !!

Re: Panorama messages.

Remo — Mon, 10 Aug 2020 19:56:55 GMT

Did you recently updated panorama to PAN-OS 10?

Re: Panorama messages.

Sourav_Saha — Mon, 10 Aug 2020 21:43:39 GMT

Yes

Re: Panorama messages.

Remo — Tue, 11 Aug 2020 11:45:45 GMT

So the next somehow obvious question: Is your panorama allowed to connect to iot.services-edge.paloaltonetworks.com:443 or is there another device/firewall in place that blocks this connection?

Re: Panorama messages.

Sourav_Saha — Tue, 11 Aug 2020 15:58:38 GMT

if the link is not malicious, it should work

Re: Panorama messages.

Remo — Tue, 11 Aug 2020 18:01:43 GMT

Actually this looks like this known issue:

Did you try to restart panorama?

Source: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-release-notes/pan-os-10-0-release-information/known-issues/known-issues-related-to-pan-os-10-0-releases.html

Re: Panorama messages.

Sourav_Saha — Tue, 11 Aug 2020 18:13:57 GMT

It did not work.

Re: Panorama messages.

Remo — Tue, 11 Aug 2020 18:18:38 GMT

so first I would make sure if this connection really is possible and not blocked anwhere and second you may want to open a support case as PAN-OS 10 is still very new and this might also be a so far not known bug which needs to be fixed in a future release.

Re: Panorama messages.

Sourav_Saha — Tue, 11 Aug 2020 19:14:22 GMT

The traffic is not being blocked,

Re: Panorama messages.

MShaw4 — Tue, 08 Sep 2020 00:06:11 GMT

What is your "Device Certificate Status"? If you don't have a valid certificate, you'll see this issue.

Re: Panorama messages.

NehruKandasamy — Wed, 06 Oct 2021 11:54:13 GMT

I am having valid cert and did all the above suggestion to stop this alert, still pursuing since upgrade Panorama 10.0.7 version, please post any fix for it. In the meantime we open a case with TAC.

Re: Panorama messages.

TunaDinc — Wed, 13 Oct 2021 20:18:58 GMT

I have exactly the same problem with 10.0.7. Did anyone ever find a solution?

Re: Panorama messages.

NguyenJimmy — Tue, 18 Jun 2024 15:33:30 GMT

I also experience this error logs with version 11.1.2-h4. Please share resolution as you got from PA TS. Thanks,