Commit takes too much time

Reply
SOC_CSG
L4 Transporter

Commit takes too much time

Hello I have a pair or 2 pan-2050 and it takes to much time to perform a commit, the last change made was incluiding a url in the white-list profile

Enqueued                     ID             Type    Status Result Completed

--------------------------------------------------------------------------

2015/08/05 12:40:40        3533           Commit       FIN     OK 13:12:44 

This is part of the output of "show system info"

time: Wed Aug  5 13:22:18 2015

uptime: 151 days, 0:57:25

family: 2000

model: PA-2050

serial: 0003C102047

sw-version: 6.0.8

global-protect-client-package-version: 2.1.2

app-version: 519-2837

app-release-date: 2015/07/30  11:58:12

av-version: 1613-2090

av-release-date: 2015/08/04  04:00:01

threat-version: 519-2837

threat-release-date: 2015/07/30  11:58:12

wildfire-version: 65688-72433

wildfire-release-date: 2015/06/20  03:55:02

url-filtering-version: 4590

global-protect-datafile-version: 0

global-protect-datafile-release-date: unknown

logdb-version: 6.0.6

platform-family: 2000

logger_mode: False

vpn-disable-mode: off

operational-mode: normal

multi-vsys: off

Any idea of what could happens to it? I have performed several times the command "debug software restart device-server" and "debug software restart management-server" and only works few times.

Best regards

Gonzalo Arroyo

P.D.

Please don't tell me to update the device...please...

Tags (2)
BLH
L2 Linker

Unfortunately it's a known issue with PA-2050's. As config grows larger over time, commit times will keep on increasing. Sometimes it gets slightly better/worse from version to version, but there's no real 'fix' AFAIK :smileyplain:

jharlow
L3 Networker

I have a PA-500 and even with this model, committing takes a long time.

glastra1
L4 Transporter

But with the PA-500 you can purchase a RAM upgrade from 1 to 2 GB that can help to achieve better commit times and webUI experience (unless you already have it). Unfortunately, the 2000 series doesn't have a RAM upgrade.

rzamora1
L0 Member

I can confirm this for the PA-500. Commit times were very long, but after upgrading the RAM to 2GB the commit times are way faster.

oschuler
L4 Transporter

We went through the same pain with two PA-2050 in a A/P cluster. At first commit times were around 3 minutes. After 3 years we waited 15+ minutes for a single commit.

 

I suggest to reboot some services on a weekly or even daily basis, it helps a little (really just a little!):

 

debug software restart device-server

debug software restart management-server

debug software restart web-server

 

That should free-up some memory for some time and commit times improve. However, I strongly suggest to upgrade to PA-3000 series. We now have two PA-3050 and commits just take ~30 seconds. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!