topic Re: PA-2020 in HA commit are just a nightmare in General Topics

PA-2020 in HA commit are just a nightmare

Arnaud-CEBEA — Thu, 01 Oct 2015 09:24:07 GMT

Dear Community,

Is there a official way to improve the commit on those models ?

It could take more than 15 minutes sometime, it really hard to work with those appliance.

the upgrade for 3030 appliance is insane too, about 40 000 € with 3 years support.

To improve the commit cmd, I have to use CLI to restart the management plane with the following commands

>debug software restart device-server

> debug software restart management-server

Do you have any tips ?

thx for your help

Arnaud

Re: PA-2020 in HA commit are just a nightmare

Hithead — Thu, 01 Oct 2015 10:51:46 GMT

The PA 2000 series are nightmare. I'm so lucky to get rid of it.

Get in contact with PAN. May they can offer a financial solution...

I know PAN is also tired to support these appliances...

Re: PA-2020 in HA commit are just a nightmare

santonic — Fri, 02 Oct 2015 06:46:33 GMT

I feel for you, man. Luckily all our customers got rid of PA-2020 by now.

Re: PA-2020 in HA commit are just a nightmare

jpeters — Fri, 02 Oct 2015 07:49:28 GMT

What version of PAN-OS are you running? I have seen a significant improvement in the 2k commit times running 7.0.2.

Re: PA-2020 in HA commit are just a nightmare

Arnaud-CEBEA — Fri, 02 Oct 2015 16:40:49 GMT

Software Version 6.1.4
GlobalProtect Agent 2.2.1

I'm afraid to upgrade

How is the commit time with the last pan OS on 2020 ?

That's the question ...

Re: PA-2020 in HA commit are just a nightmare

cpainchaud — Fri, 02 Oct 2015 17:24:44 GMT

someone in another thread he felt better performances with PANOS7

Note that you can also disable predefined reports to save memory (which is the main issue).

Re: PA-2020 in HA commit are just a nightmare

jpeters — Fri, 02 Oct 2015 22:04:44 GMT

It varies based on how busy your MP is. But in the example I observed, commit times dropped from 15-20 minutes down to 5-6 minutes. Still not as great as a 3k, but might at least be manageable. Your performance should not decrease though.

Re: PA-2020 in HA commit are just a nightmare

Kali — Sat, 10 Oct 2015 09:12:11 GMT

how do you do disable predefined reports?

Re: PA-2020 in HA commit are just a nightmare

cpainchaud — Sun, 11 Oct 2015 10:22:22 GMT

you need to use Live search function the answer kicks in first link:

https://live.paloaltonetworks.com/t5/forums/searchpage/tab/message?filter=labels&q=disable+predefined+reports