Is there any way of troubleshooting, really long commit times?

[s0lselcia]

The GUI is very slow and the commit can take up to 10 minutes

[Claw4609]

Is this a Pa-220? Cause if so that sounds about right

[s0lselcia]

Sorry I should have mentioned. Yes it is a PA-220

[Claw4609]

Then honestly that is pretty much expected. Im not familiar with your environment but you could look into disabling Share Unused Address and Service Objects with Devices in Panorama (assuming you have Panorama) to try and speed things up.

Pan-os 9.1 was the last where the 220s functioned at a somewhat reasonable speed but pan-os 10.0 and later is just miserable. I believe they still have the 220s commit times listed at the top of the known issues.

We ended up replacing all our PA-220s with PA-440s at our license renewal.

[s0lselcia]

Thanks for your response. What about the slow GUI?

[Claw4609 · Accepted solution]

Pretty much same thing. Palo simply didnt correctly predict the future needs of their product/software and the PA-220s management plane is not sized for it. The management plane just doesnt have the resources it needs. Heres whats listed at the top of Pan-os 10.1.10 known issues.

PAN-OS 10.1.10 Known Issues (paloaltonetworks.com)