topic Re: Global protect not working in General Topics

Global protect not working

VishnuPS — Thu, 29 Jul 2021 09:05:28 GMT

Hi Team,

We have faced our GP not working 26/07/2021 around 09:15 pm.

After the firewall restarts its started to work. When I analyzing TSF I got the ssl vpn below error.

"The PID for this process changed indicating it was restarted"

2021-07-26 21:17:33.573 +0530 --- processes
Total num processes: 39
Name PID CPU% FDs Open Virt Mem Res+Swap State
pppoe 6001 0 7 446520 20016 S
ha_agent 5996 0 8 239832 20068 S
satd 5997 0 12 562120 34656 S
l2ctrl 5995 0 8 519156 20820 S
dp-console 4299 0 5 21992 4392 S
varrcvr 5994 0 23 1534596 82580 S
ifmgr 5993 0 4 237052 17088 S
sysd 3857 0 99 187704 36868 S
redis_useridd 5760 0 8 33296 7240 S
ehmon 4294 0 5 83704 4716 S
devsrvr 5622 0 13 2732368 1339364 S
ikemgr 5989 0 13 609956 61652 S
crypto 4630 0 10 730896 26964 S
cdb 6194 0 18 1099916 43756 S
monitor 3956 0 15 153212 19924 R
dhcp 5999 0 7 515448 19136 S
cord 5621 0 33 624816 65752 S
ha-sshd 4660 0 5 42140 2272 S
sysdagent 3967 0 8 1129676 20064 S
masterd 3837 0 19 294204 31156 S
routed 6002 0 17 994664 58952 S
web_backend 5986 0 13 527908 24548 S
sshd 4686 0 5 42140 2388 S
useridd 5629 0 32 698860 252228 S
chasd 4298 0 8 588732 13764 S
dnsproxy 6000 0 16 653280 81832 S
dagger 3955 0 10 539484 41452 S
keymgr 5992 0 11 682268 31968 S
authd 6003 0 14 570328 74056 S
logrcvr 5990 6 307 2001560 820476 S
sslmgr 5998 0 14 1478160 85064 S
rasmgr 5991 0 10 750052 64876 S
websrvr 8607 0 14 375696 18360 S
snmpd 8284 0 15 282912 22996 S
sslvpn_ngx 10669 0 17 386160 15288 S
dp0-path_monitor 12177 0 6 125204 12436 S
mgmtsrvr 7683 0 56 2189968 619856 S
l3svc 3642 0 14 375000 29340 S
sslvpn 25296 0 23 437836 45356 S
agetty 3845 0 3 17660 916 S

Totals 6 925 25516476 4194636

PAN-OS version 9.1.8

Please help me with this for what is the reason caused.

Regards,

Vishnu

Re: Global protect not working

reaper — Thu, 29 Jul 2021 10:10:43 GMT

you'll want to check for core files '> show system files' and reach out to TAC to have that investigated

Re: Global protect not working

VishnuPS — Thu, 29 Jul 2021 10:38:19 GMT

Hi Reaper,

Please find the show system files output below.

/var/cores/:

total 4.0K

drwxr-xr-x 2 root root 4.0K Apr 18 11:01 crashinfo

/var/cores/crashinfo:

total 0

/opt/dpfs/var/cores/:

total 4.0K

drwxr-xr-x 2 root root 4.0K Apr 18 11:03 crashinfo

/opt/dpfs/var/cores/crashinfo:

total 0

/opt/panlogs/cores/:

total 4.0K

drwxrwxrwx 2 root root 4.0K Jul 27 06:51 crashinfo

/opt/panlogs/cores/crashinfo:

total 0

Re: Global protect not working

VishnuPS — Thu, 29 Jul 2021 10:38:42 GMT

Also I checked mastered logs I getting below output,

2021-07-26 21:15:28.761 +0530 INFO: sslvpn: exited, Core: False, Exit code: 0

2021-07-26 21:15:29.086 +0530 INFO: sslvpn: process running with pid 25296