topic Is there any way of troubleshooting, really long commit times? in General Topics

Is there any way of troubleshooting, really long commit times?

s0lselcia — Wed, 28 Jun 2023 10:12:02 GMT

The GUI is very slow and the commit can take up to 10 minutes

Re: Is there any way of troubleshooting, really long commit times?

Claw4609 — Wed, 28 Jun 2023 12:12:36 GMT

Is this a Pa-220? Cause if so that sounds about right

Re: Is there any way of troubleshooting, really long commit times?

s0lselcia — Wed, 28 Jun 2023 12:18:43 GMT

Sorry I should have mentioned. Yes it is a PA-220

Re: Is there any way of troubleshooting, really long commit times?

Claw4609 — Wed, 28 Jun 2023 12:23:39 GMT

Then honestly that is pretty much expected. Im not familiar with your environment but you could look into disabling Share Unused Address and Service Objects with Devices in Panorama (assuming you have Panorama) to try and speed things up.

Pan-os 9.1 was the last where the 220s functioned at a somewhat reasonable speed but pan-os 10.0 and later is just miserable. I believe they still have the 220s commit times listed at the top of the known issues.

We ended up replacing all our PA-220s with PA-440s at our license renewal.

Re: Is there any way of troubleshooting, really long commit times?

s0lselcia — Wed, 28 Jun 2023 12:33:37 GMT

Thanks for your response. What about the slow GUI?

Re: Is there any way of troubleshooting, really long commit times?

Claw4609 — Wed, 28 Jun 2023 12:37:12 GMT

Pretty much same thing. Palo simply didnt correctly predict the future needs of their product/software and the PA-220s management plane is not sized for it. The management plane just doesnt have the resources it needs. Heres whats listed at the top of Pan-os 10.1.10 known issues.

PAN-OS 10.1.10 Known Issues (paloaltonetworks.com)