- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
03-31-2025 07:38 AM
We upgraded PA-1410 from sofware release 11.0.2.-5 to 11.1.6-h3. The upgrade itself went well, but a few days later firewall stopped to send syslog messages. Executed tcpdump on the management port, but there is no syslog traffic at all. Checked the system resources, logrcvr servcie seems to be running. I tried to restart the service, and realize that, after restart two syslog session appeared in the traffic log, but nothig more. After a while, resatarted the service again, and the same happend, two syslog messages and nothing further.
Did anyone face this isse?
Regards,
Mihaly
03-31-2025 08:33 AM
@mkukucska Never face this issue on PA 1410 running PAN OS 11.1.4-h7.
This is the preferred version.
03-31-2025 09:12 AM
@MP18 What do you mean? Based on the doc we are using for choose preferred release, 11.1.6-h3 is the preferred release since 02/27/25.
03-31-2025 12:08 PM
@mkukucska Seems 11.1.4-h7 is past preferred release now. You are on Right PAN OS.
Please check this link for Troubleshooting.
Regards
03-31-2025 02:42 PM
You might want to look at PAN-272849 and see if you're impacted by that potentially. You would need to apply 11.1.8 to actually get the fix since you wouldn't be able to apply 11.1.7 on a 1410. Personally I've kept most people off of 11.1 for the time being unless they can thoroughly validate things in a lab environment; I've seen people have better success staying with 10.2 for the time being or actually moving forward to 11.2.
04-01-2025 01:54 AM
@BPry Our case different, TCP syslog server stopped, even though server is reachable via icpm echo.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!