topic Re: Standby Palo Alto Restarted automatically in General Topics

Standby Palo Alto Restarted automatically

shijimon — Thu, 29 Sep 2016 06:41:33 GMT

Dear Experts,

One of our PA firewall (2050) model that was in standby mode , restarted automatically. After checking the system logs , i found the message ( in sequence) as shown below.

1. 'md_mgr-apps: restarts exhausted, rebooting system'

2. 'The system is shutting down'

3. 'HA Group 1: Moved from state Passive to state Suspended'

Could you please assist me to indentify/clarify the below

1. What is the role of "md_mgr-apps" process in PA firewall ?

2.What could be cause of the restart of PA firewall , eventhough there is no change of high resource usage as this was in standby mode ?

3. Is it something that i should take the action now , so that the similar issue will not happen on Active Firewall ?

Please advice.

Best Regards,

Shiji

Re: Standby Palo Alto Restarted automatically

mpgioia — Thu, 29 Sep 2016 13:06:55 GMT

What PANOS version are you on ?

I had that happen to a pair of VM-200's on PANOS-7.1.4.

Get tech support file and send to support and they can confirm stack trace to see whether it fits the same bug I have.

Will be fixed in 7.1.5 or you can downgrade to 7.1.3 (if it's the same bug).

Re: Standby Palo Alto Restarted automatically

shijimon — Sun, 02 Oct 2016 06:31:36 GMT

Thanks Mic for your reply.

The software version that is running on my PA 2050 is PAN OS 5.0.9 and this is the first time i am facing this automatic restart of box.

The strange issue is , it happened only on standby box that is not processing any data traffic at the moment.

Do you beleive my software version could have the same bug that found on OS 7.1.4.

Kindly advice.

Kind Regards,

Shiji

Re: Standby Palo Alto Restarted automatically

mpgioia — Mon, 03 Oct 2016 04:35:58 GMT

5.0.9.. that is mighty old.

Same issue ?.. unlikely.. but only way to tell is get support a tech support file (https://live.paloaltonetworks.com/t5/Featured-Articles/How-to-Generate-and-Upload-a-Tech-Support-File-Using-the-WebGUI/ta-p/60757) and get them to check stack trace from spontaneously rebooting passive member to see if it's related.