Lost all MGT-server functionality after upgrade

[Bocsa]

After upgrading a PA200 to version 8.0.8, firewall comes back up but I seem to have lost all management-server functionality on the box. I am unable to commit changes, unable to download updates or software, unable to revert and unable to access the Palo's GUI. Access to SSH still works somehow.

Ran some debugs when trying to commit...a portion of the logs are below.

Any thoughts please?

2018-03-08 21:05:40.602 -0800 Error: pan_cfg_eval_constrained_xpath_do_merge(pan_cfg_utils.c:1895): error evaluating xpath: ../../../../../../../../../../network/interface/ethernet1/1/ip/entry/@name
2018-03-08 21:05:40.602 -0800 Error: pan_cfg_get_string_completions_do_merge(pan_cfg_utils.c:3733): Could not evaluate xpath ../../../../../../../../../../network/interface/$ifname/ip/entry/@name, going to next xpath
'cfg.corr.enabled': NO_MATCHES
'cfg.corr.enabled': NO_MATCHES
2018-03-08 21:05:55.407 -0800 Error: pan_parse_websrvr_tls_service_profile(pan_system_settings.c:2461): missing name parameter
2018-03-08 21:06:18.931 -0800 Error: _pan_mgmt_client_send_phase1(pan_cfg_commit_jobs.c:1575): modify failed: NO_MATCHES
2018-03-08 21:06:18.933 -0800 Error: pan_mgmt_client_table_do_phase1(pan_cfg_commit_jobs.c:2577): Management server failed to send phase 1 to client websrvr2018-03-08 21:06:20.325 -0800 Error: pan_mgmt_client_table_do_commit(pan_cfg_commit_jobs.c:3587): failed to initiate phase 1
2018-03-08 21:06:34.174 -0800 Error: pan_mgmt_client_err_callback(pan_cfg_commit_jobs.c:826): but there was no outstanding Phase 0/Phase 1/Phase 2. Ignoring - verify: 0
2018-03-08 21:06:34.179 -0800 Error: pan_mgmt_client_send_phase1_abort(pan_cfg_commit_jobs.c:1654): modify failed: NO_MATCHES
2018-03-08 21:06:34.181 -0800 Error: pan_mgmt_client_err_callback(pan_cfg_commit_jobs.c:826): but there was no outstanding Phase 0/Phase 1/Phase 2. Ignoring - verify: 0
2018-03-08 21:06:34.192 -0800 Error: pan_mgmt_client_err_callback(pan_cfg_commit_jobs.c:826): but there was no outstanding Phase 0/Phase 1/Phase 2. Ignoring - verify: 0
2018-03-08 21:06:34.195 -0800 Error: pan_mgmt_client_err_callback(pan_cfg_commit_jobs.c:826): but there was no outstanding Phase 0/Phase 1/Phase 2. Ignoring - verify: 0
2018-03-08 21:06:34.203 -0800 Error: pan_cfg_commit_to_local_device(pan_cfg_commit_handler.c:3110): Commit failed

[OtakarKlier]

Hello,

Try to restart the management UI:

debug software restart process management-server

You will lose the ssh session and it might take a few minutes to get it back online.

Regards, 

[Bocsa]

Hi,

I tried this already....as well as restarting web-server and device-server processes. That didn't help.

[OtakarKlier]

Hello,

I would say open a tac case if you havent already and make it a sev1.

Good luck.

[hshawn]

If it comes down to it you can do a

debug swm status

to check to see if you can rollback to prior install. If you need to rollback a

debug swm revert

should do the trick