<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: PA500-Losing Config on reboot. in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/pa500-losing-config-on-reboot/m-p/4935#M3630</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello Wes,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Could you please try below mentioned CLI command to verify the PAN firewall is generating traffic logs or not.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&amp;gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;show&lt;/SPAN&gt; logging-status&lt;/P&gt;&lt;P&gt;&amp;gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;debug&lt;/SPAN&gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;log&lt;/SPAN&gt;-receiver statistics&lt;/P&gt;&lt;P&gt;Logging statistics&lt;/P&gt;&lt;P&gt;------------------------------ -----------&lt;/P&gt;&lt;P&gt;Log incoming rate:&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 0/&lt;SPAN class="GINGER_SOFTWARE_mark"&gt;sec&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;Log written rate:&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 0/&lt;SPAN class="GINGER_SOFTWARE_mark"&gt;sec&lt;/SPAN&gt;&amp;nbsp; &amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;apply&lt;/SPAN&gt; the same command multiple times and verify the rate&lt;/P&gt;&lt;P&gt;Corrupted packets:&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 0&lt;/P&gt;&lt;P&gt;Corrupted URL packets:&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 0&lt;/P&gt;&lt;P&gt;Logs discarded (queue full):&amp;nbsp;&amp;nbsp; 0&lt;/P&gt;&lt;P&gt;Traffic logs written:&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 0&amp;nbsp; &amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt; verify the rate &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;( &lt;/SPAN&gt;it should be non-zero)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&amp;gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;show&lt;/SPAN&gt; system resources follow&amp;nbsp; &lt;/P&gt;&lt;P&gt;Press&amp;nbsp; &amp;gt;&amp;gt;&amp;gt; Shift+M&amp;nbsp;&amp;nbsp; and verify how much CPU has been taken by management-server process. Is there any process taking too much CPU.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Could you please restart, log receiver and management-server process and verify if that makes any changes.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Management server process functionality- &lt;SPAN style="color: #3b3b3b; font-family: 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;"&gt;Management &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;backend&lt;/SPAN&gt;, take care of configuration management, commit, reporting, etc.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-size: 10pt; line-height: 1.5em;"&gt;&lt;SPAN class="GINGER_SOFTWARE_mark"&gt;Logrcvr&lt;/SPAN&gt; process- &lt;SPAN style="font-weight: inherit; font-style: inherit; font-family: inherit;"&gt;Recording&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;SPAN style="font-family: inherit; font-size: 10pt; line-height: 1.5em; font-weight: inherit; font-style: inherit;"&gt; traffic log send by DP&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: inherit; font-size: 10pt; line-height: 1.5em; font-weight: inherit; font-style: inherit;"&gt;&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;debug&lt;/SPAN&gt; software &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;restart&lt;/SPAN&gt; log-receiver&lt;/P&gt;&lt;P&gt;&amp;gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;debug&lt;/SPAN&gt; software &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;restart&lt;/SPAN&gt; management-server &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;After applying above 2 commands, please wait for 1 min and again login into the PAN FW and verify traffic logs.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Sun, 02 Mar 2014 19:32:39 GMT</pubDate>
    <dc:creator>HULK</dc:creator>
    <dc:date>2014-03-02T19:32:39Z</dc:date>
    <item>
      <title>PA500-Losing Config on reboot.</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/pa500-losing-config-on-reboot/m-p/4934#M3629</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi Guys,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Have an issue with a pa-500 firewall running 5.11 os. There are 2 problems:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;1. The system seems to reload every week or so which in itself is bad enough,&amp;nbsp; but when it reloads it is backnto default config.&lt;/P&gt;&lt;P&gt;2. A slightly lesser issue is that the monitor isnt showing any of the traffic from interfaces in the sam sec zone even though logging is enabled. Is this normal?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I'm opening a TAC case on monday morning but was wondering if anyone has had similar issues.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks in advance&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Wes&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Sun, 02 Mar 2014 11:10:08 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/pa500-losing-config-on-reboot/m-p/4934#M3629</guid>
      <dc:creator>Wes_Neary</dc:creator>
      <dc:date>2014-03-02T11:10:08Z</dc:date>
    </item>
    <item>
      <title>Re: PA500-Losing Config on reboot.</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/pa500-losing-config-on-reboot/m-p/4935#M3630</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello Wes,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Could you please try below mentioned CLI command to verify the PAN firewall is generating traffic logs or not.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&amp;gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;show&lt;/SPAN&gt; logging-status&lt;/P&gt;&lt;P&gt;&amp;gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;debug&lt;/SPAN&gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;log&lt;/SPAN&gt;-receiver statistics&lt;/P&gt;&lt;P&gt;Logging statistics&lt;/P&gt;&lt;P&gt;------------------------------ -----------&lt;/P&gt;&lt;P&gt;Log incoming rate:&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 0/&lt;SPAN class="GINGER_SOFTWARE_mark"&gt;sec&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;Log written rate:&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 0/&lt;SPAN class="GINGER_SOFTWARE_mark"&gt;sec&lt;/SPAN&gt;&amp;nbsp; &amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;apply&lt;/SPAN&gt; the same command multiple times and verify the rate&lt;/P&gt;&lt;P&gt;Corrupted packets:&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 0&lt;/P&gt;&lt;P&gt;Corrupted URL packets:&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 0&lt;/P&gt;&lt;P&gt;Logs discarded (queue full):&amp;nbsp;&amp;nbsp; 0&lt;/P&gt;&lt;P&gt;Traffic logs written:&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 0&amp;nbsp; &amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt; verify the rate &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;( &lt;/SPAN&gt;it should be non-zero)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&amp;gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;show&lt;/SPAN&gt; system resources follow&amp;nbsp; &lt;/P&gt;&lt;P&gt;Press&amp;nbsp; &amp;gt;&amp;gt;&amp;gt; Shift+M&amp;nbsp;&amp;nbsp; and verify how much CPU has been taken by management-server process. Is there any process taking too much CPU.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Could you please restart, log receiver and management-server process and verify if that makes any changes.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Management server process functionality- &lt;SPAN style="color: #3b3b3b; font-family: 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;"&gt;Management &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;backend&lt;/SPAN&gt;, take care of configuration management, commit, reporting, etc.&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-size: 10pt; line-height: 1.5em;"&gt;&lt;SPAN class="GINGER_SOFTWARE_mark"&gt;Logrcvr&lt;/SPAN&gt; process- &lt;SPAN style="font-weight: inherit; font-style: inherit; font-family: inherit;"&gt;Recording&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;SPAN style="font-family: inherit; font-size: 10pt; line-height: 1.5em; font-weight: inherit; font-style: inherit;"&gt; traffic log send by DP&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: inherit; font-size: 10pt; line-height: 1.5em; font-weight: inherit; font-style: inherit;"&gt;&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&amp;gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;debug&lt;/SPAN&gt; software &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;restart&lt;/SPAN&gt; log-receiver&lt;/P&gt;&lt;P&gt;&amp;gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;debug&lt;/SPAN&gt; software &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;restart&lt;/SPAN&gt; management-server &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;After applying above 2 commands, please wait for 1 min and again login into the PAN FW and verify traffic logs.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Sun, 02 Mar 2014 19:32:39 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/pa500-losing-config-on-reboot/m-p/4935#M3630</guid>
      <dc:creator>HULK</dc:creator>
      <dc:date>2014-03-02T19:32:39Z</dc:date>
    </item>
  </channel>
</rss>

