topic Re: PA200 commit failed (file size limit) in General Topics

PA200 commit failed (file size limit)

soporteseguridad — Wed, 04 Jul 2018 07:29:30 GMT

Hi,

We are running commit from panorama to several PA200. Commit is failing, the reason is "Wildfire size limit" but we havent changed any value in Wildfire. If we restart management plane and run the commit again is working, the commit is done.

PanOS is 8.0.9

Why are we having this commit error??

Re: PA200 commit failed (file size limit)

LukeBullimore — Wed, 04 Jul 2018 08:21:02 GMT

Hi @soporteseguridad

Could you post a screenshot from within the Template Device -> Setup -> Wildfire? The commit is saying there is an error with these values for the "File Size Limits"

Thanks,

Luke.

Re: PA200 commit failed (file size limit)

soporteseguridad — Wed, 04 Jul 2018 11:11:39 GMT

Yes, but it seems like a bug because when we restart the management plane before commit, the commit is done properly.

This is the size WF config

Re: PA200 commit failed (file size limit)

LukeBullimore — Wed, 04 Jul 2018 11:46:25 GMT

Hi @soporteseguridad

Please see this Bug-ID resolved in PAN-OS 8.0.10

PAN-90842

Fixed an issue where commits failed after you changed the default Size Limit to a custom value for MacOSX files that the firewall forwarded to WildFire (DeviceSetupWildFire).

Your MacOSX file size limit seems to have been changed from the default (1MB) and as such you have hit this bug.

PAN-OS 8.0.10 is a recommended version at present so I would certainly recommend an upgrade.

Thanks,

Luke

Re: PA200 commit failed (file size limit)

soporteseguridad — Wed, 04 Jul 2018 13:37:25 GMT

Yes, i saw this bug but we havent change any value related to WF. And if we restart the MGMT plane before commiting is OK.

Re: PA200 commit failed (file size limit)

LukeBullimore — Wed, 04 Jul 2018 13:43:08 GMT

Hi,

The value has been changed from its default of 1MB - is there a possibility it was changed some time ago and forgotten about? Restarting the management plane appears to be a workaround for the bug I would certainly recommend to proceed with an upgrade.

Thanks,

Luke.

Re: PA200 commit failed (file size limit)

soporteseguridad — Wed, 04 Jul 2018 13:59:58 GMT

Its weird, we will proceed with the upgrade. Thanks a lot