04-27-2023 11:12 PM
We have a setup to turn-on and turn off VPN from Palo VM to Azure (at a specific time daily) but recently the tunnels are not coming up. Seems like the API calls are not being received at the other end. This setup was working before but stopped all of a sudden. VM is on 10.1.4 and I do not see any bugs addressed on the higher version. Where do I check the communication logs from the VM to the Azure in the TSF or in the Logs within GUI?
Rather how do I start my troubleshooting?
error: "curl -X GET "https://xxxxxxxxxxx.........." -H "Authorization: Basic <EncodedCredentials>" --ssl-no-revoke --insecure "
05-01-2023 11:26 AM
Is there a reason why the VPN is not full time? My guess is that there is not enough time to establish the tunnel before the API performs its calls and timeouts.
05-01-2023 03:25 PM - edited 05-01-2023 05:06 PM
Hi @OtakarKlier ,
Its not full time because of security purposes. As said, it was working all good for many months and stopped all of a sudden. Calls out and time out is like six hours apart, so should be fine I guess. Where can I see the logs for the API communication in the TSF apart from the monitor logs? I can only see VPN msgs there.
I am confused as to where to start troubleshooting.
P.s API admin gets successfully authenticated but unable to establish the VPN
I do not see any such bugs identified
05-02-2023 06:05 AM
php.debug.log is the file that you are looking for. The API requests can be sorted by searching for client='xmlapi'.
When you say that it's unable to bring up the tunnel, is it enabling things properly assuming that you're disabling them to bring them down and just not establishing?
05-02-2023 05:54 PM
I can see the the API calls stopping with error msgs as below:
It has UTC timings, not sure if this is PAN error or something else. All I could find in the latest php.debug was this but in the old ones i could see all the api calls happening successfully.
Does this look like a pan issue to you?
05-03-2023 02:54 PM
UTC is expected here. I would walk through the calls that you are making individually outside of a script and just make them directly and verify that everything is working properly. Certainly looks like something isn't formatted properly,not sure if PHP startup errors are anything to worry about, looks like the process may have just been recycled.
05-03-2023 03:31 PM - edited 05-04-2023 05:23 PM
Seems like the problem started ever since the Curl Patching was done. If there a known solution or steps on Palo for this?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!