topic Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.! in General Topics

PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

kalyanram.piratla — Thu, 07 Mar 2013 12:30:34 GMT

Greetings,

Any idea if PAN OS 5.0.2 has a bug that could reboot the firewall on its own? This has happened yesterday, when the PA-500 self rebooted (obviously lost access to everything for a good 25 mins). First thing I did was:

1. Looked at the system logs for that specific period and there was nothing evident of why the firewall rebooted. I could only see a good gap of 15 mins with no logs; after which logging was regarding the interfaces coming up etc.

2. From the cli I used less mp-log ms.log - to find some interesting stuff (snapshot attached). At 10:36 am when the firewall went down to 10:45 am; nothing has been logged apart from the special character. I could not find any relevant information from any other logs.

3. I then generated the tech support file to figure out if the crashinfo had any information, but nothing was to be found.

Any ideas? Any other ways I can find why the firewall has rebooted on its own?

Many Thanks

Kalyan

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

aciobanu — Thu, 07 Mar 2013 14:00:40 GMT

Hello Kalyan,

The reasons of restart could be many. Best would be to open a case to our support engineers and we will work on the issue.

Alex

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

kalyanram.piratla — Thu, 07 Mar 2013 14:30:01 GMT

Hey Hi,

I know there can be many more reasons. But a quick insight what else can I look into will be very helpful. Apart from this, are there any known issues with version 5.0.2. regarding rebooting?

Regards,

Kalyan

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

gswcowboy — Thu, 07 Mar 2013 14:33:25 GMT

Please open up a support case. There appears to be an issue with the HDD. Further analysis could prove it and therefore an RMA can be initiated on your behalf.

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

cmcguire-coactive — Thu, 07 Mar 2013 15:07:05 GMT

I think the consensus is that 5.0.2 is extremely buggy, _especially_ on the PA-500. You would do yourself well by going back to 5.0.1

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

kalyanram.piratla — Thu, 07 Mar 2013 17:13:20 GMT

True 5.0.2 has kind of been buggy; specially with the CPU issues. But again, 5.0.1 has its own equal share in having issues. I am eagerly waiting for 5.0.3 to be released! Nevertheless, as Rkalugdan states, I will open up a case with PAN support in a bit for further forensics.

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

gswcowboy — Thu, 07 Mar 2013 18:03:32 GMT

Hoping for a 5.03 release soon as well. The ms.log, to me indicates a likely RMA of your unit due to a faulty HDD.

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

Abs — Thu, 07 Mar 2013 20:01:25 GMT

I was informed that 5.0.3 would be released either this week, or next week at the latest!

(Now shamelessly accepting the next 54 friend requests.)

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

amansour — Thu, 07 Mar 2013 20:05:26 GMT

Would wait for 5.0.3 next week

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

kalyanram.piratla — Fri, 08 Mar 2013 15:50:45 GMT

This is leading more towards a bug in 5.0.2 related to ACC. This is the latest update I have so far!

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

mmartin — Fri, 08 Mar 2013 22:22:18 GMT

5.0.2 has rebooted on me a few times, but the main issue is high CPU on the management side as well as management interface via web console timing out and resetting (fortunately, not affecting the data plane). The reboot issue was far worse in 5.0.1 for me. Looking forward to 5.0.3.

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

aciobanu — Wed, 13 Mar 2013 17:43:06 GMT

Hi. 5.0.3 is released, you can upgrade the device now

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

mmartin — Wed, 13 Mar 2013 17:46:53 GMT

Thanks...have it downloaded...going to pull the trigger on this upgrade tonight.

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

mmartin — Tue, 19 Mar 2013 15:52:52 GMT

So far so good...on 5.0.3. Management CPU still has spikes, but not running maxed out continually.

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

amansour — Tue, 19 Mar 2013 17:27:12 GMT

What PAN HW PA500? I still have almost 100% MGMT CPU, has anyone done an inline upgrade to the RAM for this?

Re: PA-500 PAN OS 5.0.2 Firewall Self Reboot.!

kalyanram.piratla — Tue, 19 Mar 2013 17:32:51 GMT

My PA-3020 is now on 5.0.3 and I am noticing that it varying between 45-75% with the device not plugged in-line.