IoT Security works randomly, but mostly doesn't connect properly when I check EAL connection or ICD connection

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

IoT Security works randomly, but mostly doesn't connect properly when I check EAL connection or ICD connection

L0 Member

I am working on trialing IoT Security without Cortex Data lake license to see what kind of behavior my IoT devices are doing and see what policies are recommended. I was able to set it all up and see policy recommendations, but it randomly seems to stop working. This is seen on 10.1.8 and 10.2.3 where all connections show failed even though at some point it all worked. Seems to think I have no valid device certificate when I actually do. I've opened a ticket with support on this as well, but wanted to put this out there and see if someone else has encountered and figured out how to resolve. Thanks.

 

 

 

{"level":"error","time":"2022-11-27T21:30:24.884658325-05:00","message":"[DPI]Failed to connect server [tcp]e583764b-53cd-49d2-9397-c79dc1317c8b.fei-lc-prod-us.gpcloudservice.com:443, 192.168.255.1:33185 -> 34.72.73.79:443 err context deadline exceeded"}
{"level":"error","time":"2022-11-27T21:30:28.644513802-05:00","message":"failed to load default cert. err :fail to load client cert[/opt/pancfg/mgmt/lcaas/ssl/lcaas.pem], err open /opt/pancfg/mgmt/lcaas/ssl/lcaas.pem: no such file or directory"}
{"level":"error","time":"2022-11-27T21:30:28.645110352-05:00","message":"[DPI]Failed to connect server [tcp]e583764b-53cd-49d2-9397-c79dc1317c8b.fei-lc-prod-us.gpcloudservice.com:443, -> err Device certificate not present"}
{"level":"error","time":"2022-11-27T21:31:03.659997578-05:00","message":"timeout reached, context is done"}
{"level":"error","time":"2022-11-27T21:31:03.660304307-05:00","message":"[DPI]Failed to connect server [tcp]e583764b-53cd-49d2-9397-c79dc1317c8b.fei-lc-prod-us.gpcloudservice.com:443, 192.168.255.1:35834 -> 34.72.73.79:443 err context deadline exceeded"}
{"level":"error","time":"2022-11-27T21:31:03.952831259-05:00","message":"failed to load default cert. err :fail to load client cert[/opt/pancfg/mgmt/lcaas/ssl/lcaas.pem], err open /opt/pancfg/mgmt/lcaas/ssl/lcaas.pem: no such file or directory"}
{"level":"error","time":"2022-11-27T21:31:03.953588705-05:00","message":"[DPI]Failed to connect server [tcp]e583764b-53cd-49d2-9397-c79dc1317c8b.fei-lc-prod-us.gpcloudservice.com:443, -> err Device certificate not present"}
{"level":"error","time":"2022-11-27T21:31:38.97048009-05:00","message":"timeout reached, context is done"}
{"level":"error","time":"2022-11-27T21:31:38.970754962-05:00","message":"[DPI]Failed to connect server [tcp]e583764b-53cd-49d2-9397-c79dc1317c8b.fei-lc-prod-us.gpcloudservice.com:443, 192.168.255.1:57627 -> 34.72.73.79:443 err context deadline exceeded"}
{"level":"error","time":"2022-11-27T21:31:39.144032029-05:00","message":"failed to load default cert. err :fail to load client cert[/opt/pancfg/mgmt/lcaas/ssl/lcaas.pem], err open /opt/pancfg/mgmt/lcaas/ssl/lcaas.pem: no such file or directory"}
{"level":"error","time":"2022-11-27T21:31:39.146695603-05:00","message":"[DPI]Failed to connect server [tcp]e583764b-53cd-49d2-9397-c79dc1317c8b.fei-lc-prod-us.gpcloudservice.com:443, -> err Device certificate not present"}

 

 

 

 

admin@BlueBox> show device-certificate status


Device Certificate information:
Current device certificate status: Valid
Not valid before: 2022/11/26 11:13:27 EST
Not valid after: 2023/02/24 11:13:27 EST
Last fetched timestamp: 2022/11/26 11:23:32 EST
Last fetched status: success
Last fetched info: Successfully fetched Device Certificate

 

1 REPLY 1

L0 Member

I am running a PA-220 on version 10.2.3 currently.

  • 1934 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!