Management CPU ends up stuck on 100% after several commits

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Management CPU ends up stuck on 100% after several commits

L1 Bithead

Hi,

we are on a 2050 4.1.2 and are seeing consistenly that the management CPU heads towards and gets stuck on 100% after a series of commits, re-boot is only way to fix.

Is there a way to deal with this without a re-boot as this drops all sessions for 8 minutes whilst it does it?

Thanks

Kind regards

Howard

1 accepted solution

Accepted Solutions

Hi,

we have this response.

we will do the update possibly this weekend and confirm if resolved.

Kind regards

<<<

We received an update from PAN support and they have said that with regard to User-ID process causing the management plane to spike due to a conflict, this bug was identified and fixed in PanOS version 4.1.5.

Just as a note PanOS 4.1.5 was released this week, can you advise when the customer would be able to upgrade to this version of PanOS and confirm that the issue is resolved.

>>>>>

View solution in original post

11 REPLIES 11

L0 Member

We periodically have the same issue.  Have you tried/are you able to run these commands through putty:

debug software restart management-server
debug software restart device-server

Those usually resolve our problem without interrupting internet traffic (we use a PA-500, but are on the same version as you).

Be sure to check your URL filtering after running those commands.

On our PA-2020 we ran the same commands, then checked about five minutes after and URL filtering had stopped working, meaning that all our users could get anywhere they liked - in order to restore URL filtering we had to reboot the box, although we've not tried the commands since so it could have been a one-off.

L3 Networker

We have a 2050 and are running 4.1.2 , we're seeing high Management CPU %.  This happens while we're just watching the dashboard and if its too high our commits will fail everytime.  We opened a case about this. 

Same here. PA-2050 running PanOS 4.1.2.

I also noticed the traffic logs are lagged from several hours to a day.

If you get an answer from your case, I would like to know as well. We have a PA-2050 at 4.1.3 with the same issue.

Will do

They have various process debug's from us now so hopefully something will show up.

Definitely appears to be linked to user-id in some way.

This always seems to resolve immediately for 24 hours

'debug software restart user-id'

Kind regards

H

Hi,

we have this response.

we will do the update possibly this weekend and confirm if resolved.

Kind regards

<<<

We received an update from PAN support and they have said that with regard to User-ID process causing the management plane to spike due to a conflict, this bug was identified and fixed in PanOS version 4.1.5.

Just as a note PanOS 4.1.5 was released this week, can you advise when the customer would be able to upgrade to this version of PanOS and confirm that the issue is resolved.

>>>>>

We're going to update from 4.1.4 to 4.1.5 today for we are still seeing problems with the CPU load. 

We have applied the update and it has resolved our problem.

Kind regards

H

We also applied this update and it appears to have resolved our issue as well.

L3 Networker

Installing the updated did resolved our problem, thank you PaloAlto support.

  • 1 accepted solution
  • 6470 Views
  • 11 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!