topic Re: PAN-OS 7.1.4-H2 Data filtering and Url filtering logging stops at serveral hours+ SSL decrypt fa in General Topics

PAN-OS 7.1.4-H2 Data filtering and Url filtering logging stops at serveral hours+ SSL decrypt fails

Retired Member — Wed, 24 Aug 2016 17:44:50 GMT

We upgraded a VM100 from PAN-OS 7.0.8 to PAN-OS 7.1.4 H2.

We had 0 issues running 7.0.8 but we needed the DHE en EHCDE cipher support

Now we have the issue that the Data filtering and Url filtering logging stops at serveral hours.

Also some https sites starting to become very slow ands ssl decryption starting to fail for some websites.

The vm100(4cpu) is under medium load and dataplane cpu usage average 30-40 %

The only way to get it working again for x hours is to reboot the VM-100

I cannot reproduce these issues in our lab environment.

Someone else experience the same bug/behaviour?

Re: PAN-OS 7.1.4-H2 Data filtering and Url filtering logging stops at serveral hours+ SSL decrypt fa

jvalentine — Wed, 24 Aug 2016 18:14:33 GMT

I've seen the same issue. Are you running HA pair of VMs or just a single standalone firewall? I was previously running 7.1.3 and had issues with 7.1.4. I ended up rolling back. Similar symptoms: URL logging stops completely and some well-known urls incorrectly show up as "unknown"

Open a case with TAC so you can track the progress on this one.

Re: PAN-OS 7.1.4-H2 Data filtering and Url filtering logging stops at serveral hours+ SSL decrypt fa

Retired Member — Thu, 25 Aug 2016 07:09:22 GMT

Thanks for your reply.

Single VM. do you have a TAC case open?

Re: PAN-OS 7.1.4-H2 Data filtering and Url filtering logging stops at serveral hours+ SSL decrypt fa

jvalentine — Thu, 25 Aug 2016 13:41:23 GMT

I did have a case open, 00533543, but it was mapped to a VM-Series HA bug. With you running a single VM-Series and seeing these symptoms, I would definitely recommend opening a case. Feel free to reference mine for the similar symptom of URL logging stopping completely. Let me know what your case # is as well and I'll update my TAC engineer with that info.

Re: PAN-OS 7.1.4-H2 Data filtering and Url filtering logging stops at serveral hours+ SSL decrypt fa

Retired Member — Thu, 06 Oct 2016 12:53:37 GMT

My Issue is fixed in PAN-OS 7.1.5 :

PAN-61815 Fixed a rare issue where VM-Series firewalls stopped generating traffic, threat or URL logs, or lost the ability to resolve the URL category.