Management CPU keeps 100% usage

[Spark1231]

Hi experts,

We are using PA-2020 in our environment and its firmware version is "4.1.6"

PA-2020 was working smoothly but now it appears very slow process when we click commit action. We have searched and followed many reference such like 1) disable each policy logging setting (no log now), 2) execute command "debug software restart device-server" , "debug software restart log-receiver" , "debug software restart web-server" those 3 commands.

But the symptom still exits.

We used "show system resources follow" to check Memory, CPU usage and found that there is a daemon which called "authd" and its %CPU vales keeps around 180~200 range.

1. Can any experts tell us about is it a normal behavior?
2. Following is our PA-2020 Mem information, we only have less than 200M left, is it also a notmal status?
3. If the "authd" daemon shound not use so many CPU resource, how can we restart this daemon?

Here is our device snapshot:

We appreciate the one who can help us to solve or provide some tips to us for this problem.

Thank you!

[reaper]

authd is using way too much resources...

I'm not sure if you can restart authd on it's own... 4.1 is pretty ancient and to be honest I don't remember

can you give '> request restart software' a shot? (beware, this restarts the menagement plane, do not do this during production

your dataplabe will keep working but the system will lose it's "logic" for as long as the restart takes

[Spark1231]

Hi Reaper,

Thank you for your reply. Pardon for I did not get your information exactly. Do you want me to check what option command can be executed after "request restart software" or you just want me to execute "request restart software" directly?

Moreover, according to your explanation "beware, this restarts the menagement plane, do not do this during production your dataplabe will keep working but the system will lose it's "logic" for as long as the restart takes"

Will I lose connection if I am connecting to PA-2020 by SSH? 

[BPry · Accepted solution]

@Spark1231,

Yes, you will be kicked from your SSH session until the management plane comes back online. 'request restart software' is the complete command. 

[OtakarKlier]

Hello,

I also had the issue in some 2050's I was running back in the day. There is a memory leak in that train of code that should be fixed in the newer ones. I would highly recommend upgrading to a newer release.

Regards,