topic Re: SYSTEM ALERT : high : SSL connect error in General Topics

SYSTEM ALERT : high : SSL connect error

bobby549049 — Wed, 15 Feb 2012 09:41:43 GMT

Have any body got such error message as below:

domain: 1
receive_time: 2012/02/13 19:10:00
serial: 0002C123456
seqno: 0
actionflags: 0x0
type: SYSTEM
subtype: general
config_ver: 0
time_generated: 2012/02/13 19:10:00
vsys:
eventid: general
object:
fmt: 0
id: 0
module: general
severity: high
opaque: SSL connect error(10.2.1.1): 5, source: 10.3.1.250

We got a lot of such event and the mail box is going to full due to this alert mail.

Re: SYSTEM ALERT : high : SSL connect error

mikand — Wed, 15 Feb 2012 10:15:17 GMT

Did you check so the SSL is correct at your 10.2.1.1 server? Perhaps it expired or something else that makes the SSL to fail when connecting?

Re: SYSTEM ALERT : high : SSL connect error

bobby549049 — Thu, 16 Feb 2012 10:36:44 GMT

This is one Window AD domain server (10.2.1.1) and PAN Agent has been installed.

The SSL certificate should not have any error.

The key issue is that the system administrator receives a lot of the alert message.

This is not reasonable if this cause is certificate expired.

Re: SYSTEM ALERT : high : SSL connect error

bvandivier — Sat, 18 Feb 2012 18:14:00 GMT

Hi Bobby, could you please confirm what version of PAN-OS you are running on the device in question as well as the version of your PAN Agent? These errors may be related to a version mis-match between your firewall and the pan/userid agent.

Re: SYSTEM ALERT : high : SSL connect error

bobby549049 — Mon, 20 Feb 2012 05:29:08 GMT

Pan-Agent is version 3.1.2 and Pan-OS is version 4.0.9

Re: SYSTEM ALERT : high : SSL connect error

jnguyen — Wed, 22 Feb 2012 01:58:14 GMT

I would suggest you open a case online and provide a tech support file for further debugging.