topic Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks.com in General Topics

Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks.com

CyberEye — Tue, 02 Apr 2024 07:32:33 GMT

Getting below alert from the hardware firewall.

"Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks.com:443"

Followed the below document but no luck. Does anyone faced similar issue ?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000g1DOCAY&lang=en_US%E2%80%A9&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Re: Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks

JayGolf — Wed, 03 Apr 2024 03:39:46 GMT

Hi @CyberEye ,

Do you have an IoT license? The grpc is used to interface with an IoT cloud tenant.

Re: Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks

CyberEye — Sun, 21 Apr 2024 08:57:51 GMT

No IOT is not configured

Re: Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks

gshort — Thu, 16 May 2024 18:55:04 GMT

Take a look at the command 'show ctd-agent status security-client'. This should give some details of why it is failing along with the current connection status along with the server that it is trying to connect to.

Make sure you have a valid Device Certificate and the Management Interface/service route (Palo Alto Network Services) is able to reach the the URL(s) being called.

Also ensure that the OCSP urls that Palo Alto uses are also accessible over port 80:

Re: Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks

MP18 — Thu, 10 Oct 2024 17:57:01 GMT

Here is the fix run the below command for CLI

set system setting ctd feature-forward mica disable