Management CPU ends up stuck on 100% after several commits

Reply
Highlighted
L1 Bithead

Management CPU ends up stuck on 100% after several commits

Hi,

we are on a 2050 4.1.2 and are seeing consistenly that the management CPU heads towards and gets stuck on 100% after a series of commits, re-boot is only way to fix.

Is there a way to deal with this without a re-boot as this drops all sessions for 8 minutes whilst it does it?

Thanks

Kind regards

Howard


Accepted Solutions
Highlighted
L1 Bithead

Hi,

we have this response.

we will do the update possibly this weekend and confirm if resolved.

Kind regards

<<<

We received an update from PAN support and they have said that with regard to User-ID process causing the management plane to spike due to a conflict, this bug was identified and fixed in PanOS version 4.1.5.

Just as a note PanOS 4.1.5 was released this week, can you advise when the customer would be able to upgrade to this version of PanOS and confirm that the issue is resolved.

>>>>>

View solution in original post


All Replies
Highlighted
L0 Member

We periodically have the same issue.  Have you tried/are you able to run these commands through putty:

debug software restart management-server
debug software restart device-server

Those usually resolve our problem without interrupting internet traffic (we use a PA-500, but are on the same version as you).

Highlighted
L1 Bithead

Be sure to check your URL filtering after running those commands.

On our PA-2020 we ran the same commands, then checked about five minutes after and URL filtering had stopped working, meaning that all our users could get anywhere they liked - in order to restore URL filtering we had to reboot the box, although we've not tried the commands since so it could have been a one-off.

Highlighted
L3 Networker

We have a 2050 and are running 4.1.2 , we're seeing high Management CPU %.  This happens while we're just watching the dashboard and if its too high our commits will fail everytime.  We opened a case about this. 

Highlighted
Not applicable

Same here. PA-2050 running PanOS 4.1.2.

I also noticed the traffic logs are lagged from several hours to a day.

Highlighted
L0 Member

If you get an answer from your case, I would like to know as well. We have a PA-2050 at 4.1.3 with the same issue.

Highlighted
L1 Bithead

Will do

They have various process debug's from us now so hopefully something will show up.

Definitely appears to be linked to user-id in some way.

This always seems to resolve immediately for 24 hours

'debug software restart user-id'

Kind regards

H

Highlighted
L1 Bithead

Hi,

we have this response.

we will do the update possibly this weekend and confirm if resolved.

Kind regards

<<<

We received an update from PAN support and they have said that with regard to User-ID process causing the management plane to spike due to a conflict, this bug was identified and fixed in PanOS version 4.1.5.

Just as a note PanOS 4.1.5 was released this week, can you advise when the customer would be able to upgrade to this version of PanOS and confirm that the issue is resolved.

>>>>>

View solution in original post

Highlighted
L3 Networker

We're going to update from 4.1.4 to 4.1.5 today for we are still seeing problems with the CPU load. 

Highlighted
L1 Bithead

We have applied the update and it has resolved our problem.

Kind regards

H

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!