topic Re: Passive node with errors to the Paloalto cloud. in General Topics

Passive node with errors to the Paloalto cloud.

Alpalo — Fri, 31 Jan 2025 07:57:45 GMT

Hello,

Scenario:
VM300 Cluster
Active-passive
Version 10.2.12-h9
Since a few days ago, I have detected that the passive FW has the following alerts:

I have checked and the licenses and security policies are correct.

Can someone help me?

Regards

Re: Passive node with errors to the Paloalto cloud.

mshekh — Fri, 31 Jan 2025 08:38:34 GMT

Hi @Alpalo ,

In most of the cases issue happens due to connectivity issue. Please verify if internet connection is ok via management IP.

Re: Passive node with errors to the Paloalto cloud.

BPry — Sat, 01 Feb 2025 04:45:07 GMT

@Alpalo,

In addition to what @mshekh mentioned, make sure that you aren't attempting to decrypt the traffic as that will also cause issues. How often are you actually seeing the alerts on the passive unit, if you failover the traffic do you see the error persist on that particular firewall or do you see it consistently on the passive firewall regardless of which firewall is passive?

Re: Passive node with errors to the Paloalto cloud.

Alpalo — Mon, 03 Feb 2025 08:04:54 GMT

Hi,

Thanks for your answer

The problem always occurs in the passive, the connectivity is correct.

The error appears every 30s

Regards