Management CPU ends up stuck on 100% after several commits

[aardman]

Hi,

we are on a 2050 4.1.2 and are seeing consistenly that the management CPU heads towards and gets stuck on 100% after a series of commits, re-boot is only way to fix.

Is there a way to deal with this without a re-boot as this drops all sessions for 8 minutes whilst it does it?

Thanks

Kind regards

Howard

[RandyKsvr]

We periodically have the same issue.  Have you tried/are you able to run these commands through putty:

debug software restart management-server
debug software restart device-server

Those usually resolve our problem without interrupting internet traffic (we use a PA-500, but are on the same version as you).

[jrhjrh]

Be sure to check your URL filtering after running those commands.

On our PA-2020 we ran the same commands, then checked about five minutes after and URL filtering had stopped working, meaning that all our users could get anywhere they liked - in order to restore URL filtering we had to reboot the box, although we've not tried the commands since so it could have been a one-off.

[fnichelson]

We have a 2050 and are running 4.1.2 , we're seeing high Management CPU %.  This happens while we're just watching the dashboard and if its too high our commits will fail everytime.  We opened a case about this. 

[jameslee]

Same here. PA-2050 running PanOS 4.1.2.

I also noticed the traffic logs are lagged from several hours to a day.

[dcreighton]

If you get an answer from your case, I would like to know as well. We have a PA-2050 at 4.1.3 with the same issue.

[aardman]

Will do

They have various process debug's from us now so hopefully something will show up.

Definitely appears to be linked to user-id in some way.

This always seems to resolve immediately for 24 hours

'debug software restart user-id'

Kind regards

H

[aardman · Accepted solution]

Hi,

we have this response.

we will do the update possibly this weekend and confirm if resolved.

Kind regards

<<<

We received an update from PAN support and they have said that with regard to User-ID process causing the management plane to spike due to a conflict, this bug was identified and fixed in PanOS version 4.1.5.

Just as a note PanOS 4.1.5 was released this week, can you advise when the customer would be able to upgrade to this version of PanOS and confirm that the issue is resolved.

>>>>>

[fnichelson]

We're going to update from 4.1.4 to 4.1.5 today for we are still seeing problems with the CPU load. 

[aardman]

We have applied the update and it has resolved our problem.

Kind regards

H

[dcreighton]

We also applied this update and it appears to have resolved our issue as well.

[fnichelson]

Installing the updated did resolved our problem, thank you PaloAlto support.