dns-signature cloud service unavailable

[kenanuenal]

Hello, everyone,

we have had this message in the system log for two or three days, is there currently a problem with the Palo Alto Cloud?

Does anyone else have this message too?

Thank you.

[BPry]

@kenanuenal,

It's not a widespread issue, but since this is all distributed there could be an issue simply with your local cache.  

[prclimaco]

We have been seeing this too for several days.  We cannot find a resolution to this.

[MichaelPDean]

Same here. I have an open TAC case on the issue

[CosminM]

Please let us know the TAC case resolution on this issue.

My workaround about this issue is based on https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000001Uc6CAE 

First I checked if DNS security subscription on my firewall is valid.

After I reset the local cache with command "clear dns-proxy dns-signature cache", the error message stop appearing in system logs and the local cache it's regenerated.

[kenanuenal]

Thanks for the workaround, which I won't be able to look at until tomorrow.

However, I think it's more of a problem with Palo in the cloud, because somehow the availability of the cloud service is criticized here.

[TorokAdam]

I have the same problem at multiple customers and multiple 400 series firewalls. Clearing the cache didn't help for me, the error messages appeared again after some time. Did it stop for you completely?

[sursharma]

Can you please confirm if you have completely stopped seeing those errors after clearing the cache or not? 

[CosminM]

I just checked and has reappear the error messages after some time also on my PA.

[idelconsulting]

Same here. 

Looking at my Splunk logs it started around September 27th in the evening Europe time.

The error comes up periodically, but I can't really identify any pattern.

[MichaelPDean]

My last entry is 03 October at 05:20:14, US Pacific. Prior to that it was occurring several times a day. TAC is still reviewing the support file and other information I uploaded to the case.

[mb_palo]

Same here, according to the logs it started at the same time 27 Sep 18:42 CET. Clearing the cache does not help.

[prclimaco]

Similar to you, my last entry was on 10/3 2:07:07 CDST.

[kenanuenal]

Did you do something or did it stop on its own on October 3rd?

[prclimaco]

It just stopped on its own.  However, it started again this afternoon.