This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
High managment CPU and commit is taking too long time.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- Discussions
- General Topics
- Re: High managment CPU and commit is taking too long time.
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
High managment CPU and commit is taking too long time.
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-27-2021 02:43 AM - edited 05-27-2021 02:44 AM
2Dears,
i have PA-220 with running 10.0.x, version I am observing the management CPU is constantly reach up to high 100%. when I check the system resources the PAN_TASK process is always taking high CPU utilization up to 100%.
I downgrade the firewall is 9.1.4 and 9.1.9 but the same issue is happening,
As well as I checked while committing the PA is taking around 5 minutes to complete the process.
As for the troubleshooting part, I checked. only 50 sessions count in a firewall and no decryption. no security profile. no PBF. no user ID. configured.
Can anyone tell me how to reduce the management plane?
5 REPLIES 5
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-27-2021 03:04 AM
Hi @Jafar_Hussain ,
You don't need to worry about pan_task. It's expected behaviour that this process runs at 100%.
Check out the recent blog on this exact topic:
why-pan-task-is-at-100-and-why-you-shouldn-t-worry-about-it
You will also find several links there on how to reduce high MP CPU.
Cheers !
-Kiwi.
LIVEcommunity team member, CISSP
Cheers,
Kiwi
Don't forget to hit that Like button if a post is helpful to you!
Cheers,
Kiwi
Don't forget to hit that Like button if a post is helpful to you!
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-27-2021 03:12 AM
Thanks for the reply, what about the commit process it is taking time. how to resolve this.
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-27-2021 04:23 AM
Hi @Jafar_Hussain ,
5minutes might seem long ... but to be honest the PA-220 isn't famous for its fast commit or boot times 😄
Cheers,
-Kiwi.
LIVEcommunity team member, CISSP
Cheers,
Kiwi
Don't forget to hit that Like button if a post is helpful to you!
Cheers,
Kiwi
Don't forget to hit that Like button if a post is helpful to you!
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-27-2021 11:21 AM - edited 05-27-2021 11:22 AM
Performance impact: Large
Configure your system so that the entire database fits in main memory. The use of virtual memory substantially decreases performance. The database or working set does not fit if a performance monitoring tool shows excessive paging or virtual memory activity.
Related Content
- How to form alerting on AIOps in AIOps for NGFW Discussions
- Critical system log User-ID manager was reset. Commit is required to reinitialize User-ID in General Topics
- IPSec tunnel slowness issue in General Topics
- Validation failed when committing a changes to managed firewalls from Panorama in General Topics
- PA440 management interface doesn't take configuration in General Topics
Like what you see?
Show your appreciation!
Click Like if a post is helpful to you or if you just want to show your support.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks