PA-VM sysd_construct_sync_importer

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

PA-VM sysd_construct_sync_importer

L0 Member

Palo FAIL TO LOGIN.png

We got a customer that runs into this issue recently, it's a known issue (not public) for versions 11.0.0, 10.2.3, 10.2.2-h1 (and also to us 10.2.3-h2, 10.2.2-2).

When you run into this, means that there's a hardware issue, please go to TAC in order to find the root cause.

VM-series fails to boot on Hyper V with older Intel Xeon CPUs.

This is happening with Hyper V.

The solutions that we used to fix it are two:

  1. Revert to the previous version in maintenance mode:
    1. Enter maintenance mode
    2. Disk image
    3. Revert to the previous
  2. Deactivate the Vm and deploy a new one, in this case they use credits VM:
    1. Deactivate the VM license: Deactivate License (Software NGFW Credits) (paloaltonetworks.com)
    2. Deploy a new one.

 

I post this since it happened to me twice and couldn't find more info, or more relevant info regarding it.

 

Best wishes!

 

Gabeeh
6 REPLIES 6

Community Team Member

Hi @Gabeeh ,

 

Thanks for sharing this experience with the world ! I'm sure it'll be very useful for whoever runs into the same issue !

 

Kind regards,

-Kiwi

 
LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

L1 Bithead

Hello,

 

I am running into the same issue with the PAN-OS VM-Series Base Image for PAN-OS 11.0.

It may very well be that this issue is related to the CPU(s) powering the hypervisor and not that the issue is specific to Hyper-V.

 

In my case, the CPU is indeed an older Intel Xeon processor, but I am running on VMware ESXi - not Microsoft Hyper-V.

 

VMware ESXi 6.7.0 Update 2 (Build 13981272)

ProLiant DL360 G7

12 CPUs x Intel(R) Xeon(R) CPU E5649 @ 2.53GHz

 

 @Gabeeh  I tried following your recommendation. I booted the VM into the maint partition and tried performing a factory reset. This is a net-new VM-Series build.

 

I've also tried upgrading an existing VM-Series running 10.2 to version 11.0 and get the same error message as soon as I try to login as user 'admin' from the console.

 

JeffHSecBBQ_0-1675795392365.png

I've included a copy of the log from VMware ESXi in the event it can provide anything useful in support of the known issue.

 

The network interface seems to have initialized and I can ping it, but neither SSH nor HTTP/HTTPS are listening, so I am unable to login via the network.

 

Do you happen to know if this is an issue that will be resolved? Or will the older CPU simply no longer be supported?

 

Thanks in advance!

 

Hi all,

we had the same problem 3 time with a Panorama Management only, the enviroment is Vmware enviroment with 128Gb RAM

I think is a memory leak 

L1 Bithead

Memory leaks typically happen over a period of time. This issue occurs as soon as PAN-OS starts.

 

The original post, as well as mine, have the older Xeon CPU in common. What hardware are you running on?

 

I'd think if this were a memory leak, it would be something that would affect many more customers. But just purely speculative.

 

It would be nice to get some additional feedback from Palo Alto Networks.I think they've been tracking this as an issue but I'm not sure if it's been resolved yet - or if it will be. If it's related to CPU architecture, it may have been a conscious decision to not support aging hardware.

Cyber Elite
Cyber Elite

Today, PAN-OS 10.2.4 and 11.0.1 were released and this issue is addressed in these versions:

 

PAN-206069
Fixed an issue where the firewall was unable to boot up on older Intel CPUs.

 

Kind Regards
Pavel

Help the community: Like helpful comments and mark solutions.

L3 Networker

Hi,

 

Please refer the below document, it might help:

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PMQxCAO&lang=en_US%E2%80%A...

 

Regards,

Tamil

  • 7535 Views
  • 6 replies
  • 2 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!