User-ID redistribution SSL error

Marck.To — Fri, 05 Feb 2016 17:16:23 GMT

Hello,

I am trying to configure to 2 PA to share their user-id data.

I used the following guide: https://www.paloaltonetworks.com/documentation/60/pan-os/pan-os/user-id/configure-a-firewall-to-share-user-mapping-data-with-other-firewalls.html#61291

Version is 6.0.10

- Communication is done through mgt interface

- Both User-Id and HTTPS are enabled on the interface

- tcpdump shows that connectivity is ok

Log from the PA agent:

2016-02-05 16:18:45.056 +0100 Error: pan_ssl_conn_open(pan_ssl_utils.c:464): Error: Failed to Connect to x.x.x.x (source: x.x.x.x), SSL error: error:00000000:lib(0):func(0):reason(0)(0)

Log from PA Collector:

2016-02-05 16:18:50.077 +0100 Error: pan_ssl_conn_accept(pan_ssl_utils.c:554): Failed to accept ssl connect from x.x.x.x/51772
2016-02-05 16:18:50.077 +0100 Error: pan_user_id_client_proc(pan_user_id_client.c:2591): pan_user_id_client_accept() failed

Any ideas?

Re: User-ID redistribution SSL error

glastra1 — Sun, 07 Feb 2016 05:29:24 GMT

Have you verified both firewalls are running 550+ and reset the user-ID daemon?

https://live.paloaltonetworks.com/t5/General-Topics/Notice-of-PAN-OS-SSL-Certificate-Expiration/m-p/70531

regards,

Gerardo.

Re: User-ID redistribution SSL error

Marck.To — Mon, 08 Feb 2016 09:10:08 GMT

worked great. Thanks !

topic User-ID redistribution SSL error in General Topics

User-ID redistribution SSL error

Re: User-ID redistribution SSL error

Re: User-ID redistribution SSL error