PA-2020 in HA commit are just a nightmare

[Arnaud-CEBEA]

Dear Community,

Is there a official way to improve the commit on those models ?

It could take more than 15 minutes sometime, it really hard to work with those appliance.

the upgrade for 3030 appliance is insane too, about 40 000 € with 3 years support.

To improve the commit cmd, I have to use CLI to restart the management plane with the following commands

>debug software restart device-server

> debug software restart management-server

Do you have any tips ? 

thx for your help

Arnaud

[Hithead]

The PA 2000 series are nightmare. I'm so lucky to get rid of it.

Get in contact with PAN. May they can offer a financial solution...

I know PAN is also tired to support these appliances...

[santonic]

I feel for you, man. Luckily all our customers got rid of PA-2020 by now.

[jpeters]

What version of PAN-OS are you running? I have seen a significant improvement in the 2k commit times running 7.0.2. 

[Arnaud-CEBEA]

Software Version 6.1.4
GlobalProtect Agent 2.2.1

I'm afraid to upgrade 

How is the commit time with the last pan OS on  2020 ?

That's the question ...

[cpainchaud]

someone in another thread he felt better performances with PANOS7

Note that you can also disable predefined reports to save memory (which is the main issue).

[jpeters]

It varies based on how busy your MP is. But in the example I observed, commit times dropped from 15-20 minutes down to 5-6 minutes. Still not as great as a 3k, but might at least be manageable. Your performance should not decrease though.

[Kali]

how do you do disable predefined reports?

[cpainchaud]

you need to use Live search function the answer kicks in first link:

https://live.paloaltonetworks.com/t5/forums/searchpage/tab/message?filter=labels&q=disable+predefine...