Failed to validate client certificate, thread : 0, 1-0!

[Alpalo]

Hi team

Version PA 11.1.6-h3

Model 1420

Version USER_ID 11.0.1

Windows 2019

We have had an incident with the User ID agents, which have been disconnected from the firewall.
In the logs of the firewall itself the error message was: “Redistribution Agent <agent name>: details: close connection to agent”.
On the other hand, reviewing the agents' own logs we have found the following logs:

03/25/25/25 03:40:25:077[ Info 1700]: Connection 111.111.111.111.111 : 19567 closed.
03/25/25 03:40:30:108[ Info 1304]: New connection 111.111.111.111.111 : 22728.
03/25/25 03:40:30:108[ Info 1377]: Device thread 0 with 111.111.111.111.111 : 22728 is started.
03/25/25 03:40:30:124[Error 3498]: Failed to validate client certificate, thread : 0, 1-0!

We have solved the problem by restarting the process distributord in the firewall with the following command: “debug software restart process distributord”.

Any idea?

Regards

[BPry]

@Alpalo 

Have you only seen the behavior once or have you seen it once? Have you reviewed the distributord.log file on the firewall in question at all to see if the process potentially gives more insight into the error and to insure that logs are actually present?