topic Re: dns-signature cloud service unavailable in General Topics

dns-signature cloud service unavailable

kenanuenal — Fri, 30 Sep 2022 13:32:45 GMT

Hello, everyone,

we have had this message in the system log for two or three days, is there currently a problem with the Palo Alto Cloud?

Does anyone else have this message too?

Thank you.

Re: dns-signature cloud service unavailable

BPry — Fri, 30 Sep 2022 14:30:38 GMT

@kenanuenal,

It's not a widespread issue, but since this is all distributed there could be an issue simply with your local cache.

Re: dns-signature cloud service unavailable

prclimaco — Sun, 02 Oct 2022 00:57:41 GMT

We have been seeing this too for several days. We cannot find a resolution to this.

Re: dns-signature cloud service unavailable

MichaelPDean — Sun, 02 Oct 2022 04:20:23 GMT

Same here. I have an open TAC case on the issue

Re: dns-signature cloud service unavailable

CosminM — Mon, 03 Oct 2022 07:36:48 GMT

Please let us know the TAC case resolution on this issue.

My workaround about this issue is based on https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000001Uc6CAE

First I checked if DNS security subscription on my firewall is valid.

After I reset the local cache with command "clear dns-proxy dns-signature cache", the error message stop appearing in system logs and the local cache it's regenerated.

Re: dns-signature cloud service unavailable

kenanuenal — Mon, 03 Oct 2022 10:47:59 GMT

Thanks for the workaround, which I won't be able to look at until tomorrow.

However, I think it's more of a problem with Palo in the cloud, because somehow the availability of the cloud service is criticized here.

Re: dns-signature cloud service unavailable

TorokAdam — Tue, 04 Oct 2022 08:49:37 GMT

I have the same problem at multiple customers and multiple 400 series firewalls. Clearing the cache didn't help for me, the error messages appeared again after some time. Did it stop for you completely?

Re: dns-signature cloud service unavailable

sursharma — Tue, 04 Oct 2022 15:24:30 GMT

Can you please confirm if you have completely stopped seeing those errors after clearing the cache or not?

Re: dns-signature cloud service unavailable

CosminM — Tue, 04 Oct 2022 18:23:47 GMT

I just checked and has reappear the error messages after some time also on my PA.

Re: dns-signature cloud service unavailable

idelconsulting — Tue, 04 Oct 2022 18:44:22 GMT

Same here.

Looking at my Splunk logs it started around September 27th in the evening Europe time.

The error comes up periodically, but I can't really identify any pattern.

Re: dns-signature cloud service unavailable

MichaelPDean — Tue, 04 Oct 2022 19:21:38 GMT

My last entry is 03 October at 05:20:14, US Pacific. Prior to that it was occurring several times a day. TAC is still reviewing the support file and other information I uploaded to the case.

Re: dns-signature cloud service unavailable

mb_palo — Wed, 05 Oct 2022 07:03:39 GMT

Same here, according to the logs it started at the same time 27 Sep 18:42 CET. Clearing the cache does not help.

Re: dns-signature cloud service unavailable

prclimaco — Wed, 05 Oct 2022 18:55:02 GMT

Similar to you, my last entry was on 10/3 2:07:07 CDST.

Re: dns-signature cloud service unavailable

kenanuenal — Thu, 06 Oct 2022 13:09:40 GMT

Did you do something or did it stop on its own on October 3rd?

Re: dns-signature cloud service unavailable

prclimaco — Thu, 06 Oct 2022 21:04:59 GMT

It just stopped on its own. However, it started again this afternoon.

Re: dns-signature cloud service unavailable

MichaelPDean — Thu, 06 Oct 2022 22:34:52 GMT

I have not received another report of issue on the firewall since 3 October. The response from TAC is basically, they found an issue with the service and are working on it.

Re: dns-signature cloud service unavailable

idelconsulting — Thu, 13 Oct 2022 20:37:54 GMT

How does it look for everybody else?

I didn't see any alert now for the last 24 hours.

Re: dns-signature cloud service unavailable

mb_palo — Fri, 14 Oct 2022 07:00:10 GMT

I confirm, for the last 24 hours the log is clean

Re: dns-signature cloud service unavailable

ssikder — Tue, 13 Jun 2023 16:13:57 GMT

I am noticing this alert . Opened a tac case. nobody resolving this issue

Re: dns-signature cloud service unavailable

jpappachan — Wed, 08 Nov 2023 05:55:15 GMT

Even we do have the same issue, unfortunately couldn't solve till date