topic Re: Palo alto 220 Disk issue in General Topics

Palo alto 220 Disk issue

hpatel11 — Wed, 19 Oct 2022 16:05:48 GMT

We have PA 220 at few of our site. Multiple times a day it's getting "Disk usage for / exceeds limit, 97 percent in use, cleaning filesystem" Sometime it goes to non-functional state because auto disk cleanup won't work and it will fill out 100%. I have opened case with support but they were not helpful gave me KB:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PMznCAG
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oNalCAE
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaJCAS

This KB don't work always unless you do disk cleanup every hour. I know this is known bug in PAN OS 10.2 https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-3-known-and-addressed-issues/pan-os-10-2-3-known-issues PAN-193452

also support gave me

">>The fixed version of this issue is PAN-OS-10.2.3.

ETA of PAN-OS September-8-2022"

It had passed that date and version but it's not resolved in version 10.2.3
I wanted to know that what you guys are doing in this case with PA 220 it's getting really annoying with this disk issue. Only way I fix this issue on PA 220 is to reboot them which brings down disk to 92% to get FW back to functional state. That works for 2-3 days and back to same issue.

Re: Palo alto 220 Disk issue

OtakarKlier — Wed, 19 Oct 2022 21:00:08 GMT

Hello,

I dont have much to add here except I'm already sure you only have the software that you are running on the device to save space. Could be a bug so I would continue to push support. I havent read all of the 10.2 release notes.

Regards,

Re: Palo alto 220 Disk issue

hpatel11 — Sat, 22 Oct 2022 17:55:57 GMT

Cool I'll check with support. Thank you!

Re: Palo alto 220 Disk issue

BPry — Sun, 23 Oct 2022 03:09:44 GMT

@hpatel11,

You can lower your on-device log retention levels to help keep the disk clear longer, and you can utilize the API to remediate this automatically via a script to keep things functional. Unfortunately you're kind of stuck until PAN addresses the issue however.