High managment CPU and commit is taking too long time.

[Jafar_Hussain]

2Dears,

i have PA-220 with running 10.0.x, version I am observing the management CPU is constantly reach up to high 100%. when I check the system resources the PAN_TASK process is always taking high CPU utilization up to 100%.

I downgrade the firewall is 9.1.4 and 9.1.9 but the same issue is happening,

As well as I checked while committing the PA is taking around 5 minutes to complete the process.

As for the troubleshooting part, I checked. only 50 sessions count in a firewall and no decryption. no security profile. no PBF. no user ID. configured.

Can anyone tell me how to reduce the management plane?

[kiwi]

Hi @Jafar_Hussain ,

You don't need to worry about pan_task.  It's expected behaviour that this process runs at 100%.

Check out the recent blog on this exact topic:

why-pan-task-is-at-100-and-why-you-shouldn-t-worry-about-it 

You will also find several links there on how to reduce high MP CPU.

Cheers !

-Kiwi.

[Jafar_Hussain]

@kiwi 

Thanks for the reply, what about the commit process it is taking time. how to resolve this.

[kiwi]

Hi @Jafar_Hussain ,

5minutes might seem long ... but to be honest the PA-220 isn't famous for its fast commit or boot times 😄

Cheers,

-Kiwi.

[mithan]

Performance impact: Large

Configure your system so that the entire database fits in main memory. The use of virtual memory substantially decreases performance. The database or working set does not fit if a performance monitoring tool shows excessive paging or virtual memory activity.

@clicksud