topic Re: PA200 time out - reason directory / 100% in General Topics

PA200 time out - reason directory / 100%

Es_tecsupportsecurity — Fri, 07 Apr 2017 12:28:44 GMT

Hi,

We have a cluster PA-200 with error "Session timed out". I just saw this link

https://www.pickysysadmin.ca/2015/02/08/palo-alto-firewall-displays-session-timed-out-when-you-try-to-login/

I tried to delete all core files but disk space is still in 100%. Any workaround???

Re: PA200 time out - reason directory / 100%

TranceforLife — Fri, 07 Apr 2017 12:38:11 GMT

What PAN-OS are you on? PA200 very vell known for the root partition free space issue. Only TAC can get access and remove all unnecessary files. Same time you might be hitting the bug (depends on the pan release).

https://live.paloaltonetworks.com/t5/Featured-Articles/DotW-Disk-space-issue-on-root/ta-p/71914

Re: PA200 time out - reason directory / 100%

Es_tecsupportsecurity — Fri, 07 Apr 2017 12:46:38 GMT

Yes, i tried to delete corefiles but not releasing much space. No pcaps, no nothing that i could delete 😞

Re: PA200 time out - reason directory / 100%

ansharma — Fri, 07 Apr 2017 13:29:15 GMT

Did you delete mp logs too?

delete debug-log mp-log file *.1
delete debug-log mp-log file *.2
delete debug-log mp-log file *.3
delete debug-log mp-log file *.old

It should bring down some usage.

I'd also recommending to 7.1.5 or higher. There have been a lot of improvements for PA-200 using a higher OS code.

Re: PA200 time out - reason directory / 100%

BPry — Fri, 07 Apr 2017 13:33:02 GMT

On the PA-200s I really recommend running with very little logging, or retaining the logs for a defined amount of time, to keep this issue from rearing it's ugly head. I would also try deleting some of the older system images if you haven't already.