I am unable to view traffic in monitor

[nconquest]

I notice today with our Palo Alto devices. I can no longer monitor traffic on the monitoring tab using either the Traffic or URL Filtering options. I’m getting an error that states “Invalid XML response from server”. Do you know of a quick way that I can resolve this issue.

[HULK · Accepted solution]

Hello Sir,

Are you using IE-9 to open the GUI of PAN firewall...? Could you please try with Chrome or Firefox and let us know the result.

Thanks

[nconquest]

Hello Hulk,

So once the client tries with the other browser and is unsuccessful what would you recommend for the next steps?

[HULK]

Hello Sir,

I would recommend you to verify the management-plane resources utilization on that PAN firewall.

> show system resources follow

See management-server, log-receiver, device-server CPU and memory utilization.

> show logging-status

> debug log-receiver statistics

Sample output: Please apply the above mentioned CLI command multiple times and  verify if those counters are incrementing.

Logging statistics

------------------------------ -----------

Log incoming rate:             0/sec

Log written rate:              0/sec >>>>>>>>>>>>>>>>

Corrupted packets:             0

Corrupted URL packets:         0

Logs discarded (queue full):   0 >>>>>>>>>>>>>>

Traffic logs written:          4  >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

URL logs written:              0

Wildfire logs written:         0

Anti-virus logs written:       0

Spyware logs written:          0

Attack logs written:           0

Vulnerability logs written:    0

Fileext logs written:          0

URL cache age out count:       0

URL cache full count:          0

URL cache key exist count:     0

If you observe,"traffic log written" counter is incrementing but still unable to see logs from GUI, then follow below mentioned command.

> debug software restart log-receiver

> debug software restart device-server

> debug software restart management-server

It would not impact to the production traffic through this PAN firewall.

Hope this helps. If you have any further questions or inquiries, please update here.

Thanks

[nconquest]

It was found to be a IE9 issue.

[nconquest]

found to be IE9 issue

[cgs_seseg]

Hello,

I resolved the problem enabling ActiveX on iE11. My scenario is a PAN-OS 8.1.1 updated. When I tried to access using firewall's IP address I didn't see any pop-up or alert in any place but using the FQDN, an blue forbidden icon appeared in navigation bar. In my case, the Group Policy Objects (GPO) disabled the ActiveX and that caused the message: "Invalid XML response from server".

I hope this is useful.

Regards.