topic Re: unable to access Palo Alto Web GUI. in General Topics

unable to access Palo Alto Web GUI.

SIIX_Support — Wed, 21 Dec 2022 10:24:35 GMT

Hello,

After a recent update from 8.1.20 to 9.0.0, we are not able to access the Palo Alto web GUI (hmmm.. can't reach this page)

But we are able to ssh to the device though. We are updating the firmware to the latest version but now need to figure out how to bring up the web gui.

our device model is pa 3020

any thoughts?

Thank you.

Re: unable to access Palo Alto Web GUI.

TomYoung — Wed, 21 Dec 2022 13:39:45 GMT

Hi @SIIX_Support ,

Most likely it is an issue with the certificate. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cli0CAC. During the configuration conversion from 8.1 to 9.0, the cert or or SSL/TLS profile got corrupted.

Changing the certificate configuration and commiting should automatically restart the management plane. If it is not a cert issue, maybe the management plane needs to be bounced. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaGCAS

Please let us know if these steps fix the issue.

Thanks,

Tom

Re: unable to access Palo Alto Web GUI.

OtakarKlier — Thu, 22 Dec 2022 19:26:57 GMT

Hello,

Also try to connect with a different browser. Saved cookies and temp files could be preventing the page from rendering.

Regards,

Re: unable to access Palo Alto Web GUI.

SIIX_Support — Sat, 18 Mar 2023 08:12:47 GMT

Hello,

Sorry for the late response, we tried the suggested approach but we still unable to login via Gui.

We suspect the issue occurs when we upgrade to firmware from 8.1.20 to 9.0.0.

We just also noticed that even calling the software download or dynamic updates via cli are not functioning.

any other approach we can try?

Can we revert back to 8.1.20? will it there be a risk if we go to this path?

take note we can only access the PA firewall via site to site tunnel.

for your advice.

Thanks

Re: unable to access Palo Alto Web GUI.

TomYoung — Sat, 18 Mar 2023 12:11:21 GMT

Hi @SIIX_Support ,

So you can access the GUI from the VPN tunnel? Then check your Monitor > Logs > Unified. Filter on destination IP address = NGFW management interface. See if the traffic is blocked by rule, threat, etc.

Thanks,

Tom

Re: unable to access Palo Alto Web GUI.

BPry — Sun, 19 Mar 2023 05:28:00 GMT

@SIIX_Support,

In addition to what @TomYoung already mentioned, have you verified that any service routes you have configured on the device were carried over if you're not able to download updates? Also take note that 9.0.0 itself had plenty of issues present, including several that directly addressed GUI issues specifically and an early bug in that code branch that had various issues with appweb that caused the interface to stop responding completely. I might try upgrading the device to 9.0.17 before attempting to downgrade to 8.1 again.

Re: unable to access Palo Alto Web GUI.

SIIX_Support — Sun, 19 Mar 2023 10:49:40 GMT

Hi Tom,

No we cannot access the GUI and only via SSH that we can access the remote firewall.

already performed the certificate approach https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cli0CAC. to no avail.

Re: unable to access Palo Alto Web GUI.

MP18 — Sun, 19 Mar 2023 18:44:01 GMT

@SIIX_Support

Please open the TAC case.

Regards

Mahesh

Re: unable to access Palo Alto Web GUI.

nikoolayy1 — Wed, 22 Mar 2023 14:15:23 GMT

Have you checked the hard disk if it is full as this can cause such issues?

https://live.paloaltonetworks.com/t5/general-topics/knowledge-sharing-troubleshooting-and-investigating-full-hard/td-p/411960

Also as suggested try to return to the old version and then upgrade to latest 9.0.x version.

Re: unable to access Palo Alto Web GUI.

SIIX_Support — Mon, 01 May 2023 09:25:43 GMT

Hi ,

This disk is still have enough space.

relating to reverting to the previous working Pan OS software, we found this link as the procedural approach:

How to Revert PAN-OS to the last installed software using CLI. - Knowledge Base - Palo Alto Networks

Our question is, if we will be coming from ver 9.0 and reverting back to ver 8.1.20 what things we need consider since it will reverting back from a major software version?

Thanks for the advise.

Re: unable to access Palo Alto Web GUI.

SIIX_Support — Mon, 01 May 2023 09:36:09 GMT

For some reason also, we noticed that after moving to ver 9.0, we couldnt download any dynamic update:

"Failed to check upgrade info due to generic communication error. Please check network connectivity and try again"

any idea why this occurs?

Thanks

Re: unable to access Palo Alto Web GUI.

MP18 — Tue, 18 Jul 2023 15:00:06 GMT

@SIIX_Support

Do you have DNS configured on the PA?

Make sure Firewall can ping and resolve the FQDN like

ping host www.google.com

Regards