topic Re: panorama commit shows 0% but commit is on the device already in General Topics

panorama commit shows 0% but commit is on the device already

max.loi — Fri, 13 Dec 2019 12:19:22 GMT

I have a really funny issue here.
I have panorama for managing all my firewalls, spread across the world.
I did a change for our London firewalls and hit "push and commit" on panorama.
The queue shows 0% progress, I waited half an hour, restarted panorama, did the same commit, still 0% progress.
Then I've checked on the firewalls and both commits have been applied, but panorama "didn't know it". Total time wasted: 2 hours.
I think panorama developers should make much more effort on that, right now it is good just for marketing, not really for daily operation work, as this is not the only weird thing happening on it. I'm really wasting a lot of hours all the time I work with panorama. Right now the total expense for the paloalto solution doesn't worth the cost compared to other brands.

Max

Re: panorama commit shows 0% but commit is on the device already

kiwi — Fri, 13 Dec 2019 13:37:16 GMT

Hi @max.loi ,

Which PAN-OS version are you running ? I remember some older PAN-OS version showing some issues with the management server where the Task Manager displayed different status after you initiated a push operation to firewalls.

Alternatively you can check on your FW locally to see how far along the commit is.

Cheers,

-Kiwi.

Re: panorama commit shows 0% but commit is on the device already

max.loi — Fri, 13 Dec 2019 14:11:25 GMT

9.0.5

Re: panorama commit shows 0% but commit is on the device already

MP18 — Sat, 14 Dec 2019 05:37:00 GMT

I have also seen similar behaviour few times on our Panorama M100 running 8.1.9

Our Firewalls are also running 8.1.9

In our case Panorama commit is not this long only around minute or two delay.

Need to click on refresh to see the commit is done on Panorama.

Re: panorama commit shows 0% but commit is on the device already

max.loi — Thu, 02 Jan 2020 09:51:58 GMT

I don't know, I'm using 9.0.5 and this is not the first time this issue happens.

By considering the cost of this product, this is really unacceptable, because committing changes to managed devices is the basic functionality, if that doesn't work properly the whole product is unreliable and dangerous to use.

Re: panorama commit shows 0% but commit is on the device already

PS007 — Thu, 25 Apr 2024 23:16:48 GMT

This even happens when Panorama is on 10.2.7-h3 and commit sent to managed device on 9.1.17

But in my case issue was fixed when App & threat content was updated with Panorama