topic Re: Resstart appweb in PanOS 7.0.x in General Topics

Restart appweb in PanOS 7.0.x

Es_tecsupportsecurity — Tue, 14 Feb 2017 11:11:20 GMT

Hi,

CPU is high because of appweb process. We are running this command debug software restart <PID process appweb>

but its not working in 7.0. How could we restart appweb proccess in PanOs 7

Thanks a lot.

Re: Resstart appweb in PanOS 7.0.x

reaper — Tue, 14 Feb 2017 10:19:24 GMT

Hi!

the process PID is never used to address a process, they are addressed by process name (you can use the TAB key to see which processes are available for restart)

> debug software restart process <TAB>
  authd               authentication process
  cord                correlation process
  device-server       Device server process
  dnsproxy            Dnsproxy process
  l2ctrl              l2 control process
  l3-service          L3 services server process
  log-receiver        Log Receiver server process
  management-server   Management server process
  ntp                 Restart and re-synchronize NTP service
  rasmgr              SSL VPN daemon
  routed              Routing process
  satd                Satellite process
  snmpd               snmp process
  sslmgr              Sslmgr process
  sslvpn-web-server   SSL VPN Web server process
  user-id             User-ID process
  vardata-receiver    Vardata Receiver server process
  web-server          Web server process

appweb is, however, a tricky one as it serves 3 processes: the GUI webinterface, the ssl-vpn portal and CaptivePortal

Re: Resstart appweb in PanOS 7.0.x

kiwi — Tue, 14 Feb 2017 10:28:58 GMT

Hi @Es_tecsupportsecurity,

It's as reaper mentioned.

This process has 3 instances with different names in MP (2 of them you can restart with the debug command).
You could try this and see if it alleviates the load :

> debug software restart process sslvpn-web-server
> debug software restart process web-server

Cheers !

-Kim.

Re: Resstart appweb in PanOS 7.0.x

Es_tecsupportsecurity — Tue, 14 Feb 2017 10:36:17 GMT

OK, i restarted management server first, just in case....

Restarting web-server and sslvpn would affect to fw service??? it would be necessary a window???

Re: Resstart appweb in PanOS 7.0.x

reaper — Tue, 14 Feb 2017 12:56:42 GMT

depends on how intensively you use the GUI or SSLVPN portal, there will not be an impact on the firewall functions, but the portal may be unavailable for a few minutes while the service restarts

Tom