PA2020 High CPU utilization "useridd" 100% management plane

[steve.chupack]

So just to be clear, this issue is specific to configurations using the external userID agent? I.e., the service that I'm running on my DCs?  I can't really switch to agent-less, which I assume means the settings in the Device --> User Identification --> User Mapping tab, as I need to parse Exchange logs. But if someone could clarify, that would be helpful for my own edification.

[MSJ]

Came here for the same issue.  Constant 100% utilization on the management CPU.  Problem started when I moved from 5.0.1 to 5.0.2.

We're using the UserID agent and need the API functionality so we can't switch to agent-less.

Also, GlobalProtect clients seem to be disconnecting and reconnecting a lot since moving to 5.0.2, not sure if that's related to the management CPU being tied up.

[gtomte]

Hi all.

4.1.11-h1 is out. If you experience the high CPU load on useridd, please open a support case, and send the serial number, and you will be given access to the hotfix ASAP. For the same problem with 5.0.2, 5.0.3 will be released next week with the fix.

GT

[MSJ]

I just installed 5.0.3 (which addresses this issue) earlier today, looks like the fix is good.

[jay.martin]

I agree so far (pretty early still to for me to call 5.0.3 all good, but...) it has useridd back to what I would call "normal" in terms of cpu utilization - I've put 5.0.3 on both 2000 and 4000 platforms with similar (good) results - let's just hope 5.0.3 doesn't introduce some new nasties!!!

[CCANCIENNE]

Can confirm this as well. Management CPU back down to where it should be after applying 5.0.3.