topic Re: SYSTEM ALERT: Version 5.0.5 in General Topics

SYSTEM ALERT: Version 5.0.5

Oleksandr — Wed, 12 Jun 2013 14:05:10 GMT

Hi All,

After upgrading to version 5.0.5 i have a strange thing....

---

severity: high

opaque: HA Group 1: Peer version of 5.0.5 not compatible with the HA2 keep-alive setting; disabling HA2 keep-alive

---

severity: critical

opaque: HA Group 1: All HA1 connections down

----

Am I missing something?

Regards,

Alex

Re: SYSTEM ALERT: Version 5.0.5

VinceM — Wed, 12 Jun 2013 14:09:24 GMT

HI,

Both of you palo have been upgraded in 5.0.5 ?

What was your previous version ?

Re: SYSTEM ALERT: Version 5.0.5

Oleksandr — Wed, 12 Jun 2013 14:13:50 GMT

HI,

Yes,

Previous version was 5.0.4

Regards,

Alex

Re: SYSTEM ALERT: Version 5.0.5

VinceM — Wed, 12 Jun 2013 14:17:53 GMT

have you try o suspend your backup device and unsuspend ?

Re: SYSTEM ALERT: Version 5.0.5

Oleksandr — Wed, 12 Jun 2013 14:24:31 GMT

no, but how can it helps?

Must I do it?

Regards,

Alex

Re: SYSTEM ALERT: Version 5.0.5

VinceM — Wed, 12 Jun 2013 14:27:36 GMT

Hi,

No risk to do on the passiv device.

Does your HA1 and HA2 connection are up ? does ycluster is fonctionnal ?

Re: SYSTEM ALERT: Version 5.0.5

Oleksandr — Wed, 12 Jun 2013 14:32:40 GMT

yes,

It happened at 1 am this night, maybe after auto upgrading of new "Applications and Threats".

And , afterwards, all working fine again

Regards,

Alex

Re: SYSTEM ALERT: Version 5.0.5

VinceM — Wed, 12 Jun 2013 14:35:07 GMT

better thing in this case (if everything is fonctionnal) should be to generate a tech support and open a case. Support should be able to find the issue.

Re: SYSTEM ALERT: Version 5.0.5

gswcowboy — Wed, 12 Jun 2013 16:55:31 GMT

Typically, at 1am, you will have daily reports generate in addition to your dynamic updates so lots of action on the MP at that time. I would recommend staggering your dynamic updates (ie., apps/threats download/install at 2am and AV download/install at 3am). That being said, we won't know true root cuase until a case is opened with Support and/or Reseller and a TS file attached to the case. Just my 2 cents.

Re: SYSTEM ALERT: Version 5.0.5

Retired Member — Wed, 12 Jun 2013 17:26:15 GMT

this happened to us on 5.0.4

we opened a case.

we mentioned that The management plane was so busy at this time that it was not able to process the HA messages that are received from the physical HA links.

1)configure

commit all

exit

2) debug software restart management-server (wait for a minute to let it complete)

3) debug software restart device-server (wait for a minute to let it complete)

4) if above steps does not help, disable HA, remove HA configs, commit it, enable and configure HA and commit and follow steps above .