high management CPU

[diennea]

Hi,

my PA500 management CPU is 100%

PAN OS release 5.0.2 (same problem with 5.0.1)

If I reboot the firewall, management CPU usage goes down for some days than raise again to 100%

[darren_g]

BobW wrote:

There is an issue with pan_logdb_index in 5.0.1 which can cause some intermittent high CPU usage.
Bob

An issue which continues through to 5.0.6 at least - I'm told it "might" be fixed in 5.0.8, but I'm not holding my breath.

[dieter_b]

I've noticed high cpu too. We've been experimenting with ditching the software user id agent on the DC's in favor of the hardware (on device) user id agent. Reading Architecting User Identification Deployments gave me a better insight in usage of the different user id possibilities. Now I'm considering keeping the software user id agents on the DC, since it suits our environment better.

E.g. the hardware user id agent can cause a lot of cpu demand on both the management server and DC's. Traffic between firewall and DC is completely different when using software of hardware user id agent.

Careful planning may improve the situation. If you get management cpu down, the GUI user experience also enhances greatly.

[diennea]

Regarding my situation:

I upgrade RAM from 1 to 2 GB

I cannot believe my eyes: now GUI usage is fast and commit take less than 2 minutes

[darren_g]

You can't upgrade the RAM on a 2000 series. I only wish you could!