Commit takes too much time

[SOC_CSG]

Hello I have a pair or 2 pan-2050 and it takes to much time to perform a commit, the last change made was incluiding a url in the white-list profile

Enqueued                     ID             Type    Status Result Completed

--------------------------------------------------------------------------

2015/08/05 12:40:40        3533           Commit       FIN     OK 13:12:44 

This is part of the output of "show system info"

time: Wed Aug  5 13:22:18 2015

uptime: 151 days, 0:57:25

family: 2000

model: PA-2050

serial: 0003C102047

sw-version: 6.0.8

global-protect-client-package-version: 2.1.2

app-version: 519-2837

app-release-date: 2015/07/30  11:58:12

av-version: 1613-2090

av-release-date: 2015/08/04  04:00:01

threat-version: 519-2837

threat-release-date: 2015/07/30  11:58:12

wildfire-version: 65688-72433

wildfire-release-date: 2015/06/20  03:55:02

url-filtering-version: 4590

global-protect-datafile-version: 0

global-protect-datafile-release-date: unknown

logdb-version: 6.0.6

platform-family: 2000

logger_mode: False

vpn-disable-mode: off

operational-mode: normal

multi-vsys: off

Any idea of what could happens to it? I have performed several times the command "debug software restart device-server" and "debug software restart management-server" and only works few times.

Best regards

Gonzalo Arroyo

P.D.

Please don't tell me to update the device...please...

[BLH]

Unfortunately it's a known issue with PA-2050's. As config grows larger over time, commit times will keep on increasing. Sometimes it gets slightly better/worse from version to version, but there's no real 'fix' AFAIK :smileyplain:

[jharlow]

I have a PA-500 and even with this model, committing takes a long time.

[glastra1]

But with the PA-500 you can purchase a RAM upgrade from 1 to 2 GB that can help to achieve better commit times and webUI experience (unless you already have it). Unfortunately, the 2000 series doesn't have a RAM upgrade.

[rzamora1]

I can confirm this for the PA-500. Commit times were very long, but after upgrading the RAM to 2GB the commit times are way faster.

[oschuler]

We went through the same pain with two PA-2050 in a A/P cluster. At first commit times were around 3 minutes. After 3 years we waited 15+ minutes for a single commit.

I suggest to reboot some services on a weekly or even daily basis, it helps a little (really just a little!):

debug software restart device-server

debug software restart management-server

debug software restart web-server

That should free-up some memory for some time and commit times improve. However, I strongly suggest to upgrade to PA-3000 series. We now have two PA-3050 and commits just take ~30 seconds.