topic PAN 3.1.6 use of proxy for updates in General Topics

PAN 3.1.6 use of proxy for updates

ggoudr — Mon, 29 Nov 2010 13:11:20 GMT

Hello all,

After upgrading a PAN Device to PANOS 3.1.6, we see a strange behaviour, when the mananement plane is using a proxy for the updates (as defined in the Device->Setup->Edit).

We have defined a proxy over there, for example 10.0.0.4 and port 8080, and then we changed the proxy to 10.0.0.18 and port 8080.

After doing some checks with the new proxy 10.0.0.18:8080 we have changed back to 10.0.0.4:8080. The strange behaviour is that we see from the 10.0.0.18 proxy's logs that this is the proxy that the PAN device is using, ignoring the last configuration that was to return back to the 10.0.0.4 proxy. The PAN device's management IP is 10.0.0.20.

I am trying to troubleshoot this strange behaviour and find out what is the actual proxy tha the device is using (as it seems that is not using the one that is defined in the Device->Setup configuration) by using a kind of debugging command from the command line interface.

Also, in case that something went wrong in the commit of the configuration of the device, I am trying to remember what is the command to commit the whole configuration and not the "delta" config that is being commited when the commit button is pressed, in case this will resolve the problem!

Please help,

Regards

George G.

Re: PAN 3.1.6 use of proxy for updates

jnguyen — Mon, 29 Nov 2010 17:07:08 GMT

please do a commit force from the cli.

Re: PAN 3.1.6 use of proxy for updates

ggoudr — Tue, 30 Nov 2010 11:00:07 GMT

Indeed the "commit force" command will submit the whole configuration.

By doing a commit force did not resolve the strange issue with the proxy used by the management interface.

Is there any other command that will allow me to view which proxy is being used for the anagement interface (and why the correct proxy is not used?).

Regards,

George G.

Re: PAN 3.1.6 use of proxy for updates

jnguyen — Tue, 30 Nov 2010 16:46:29 GMT

Do you use a password with your proxy server? if so try changing it to something simple like 1234abcd. if you are still having issue please open a case via the web or call into support for further debugging.

Re: PAN 3.1.6 use of proxy for updates

ggoudr — Fri, 10 Dec 2010 12:58:59 GMT

The proxy used does not require authentication, so no username / password has been set.