PA500-Losing Config on reboot.

[Wes_Neary]

Hi Guys,

Have an issue with a pa-500 firewall running 5.11 os. There are 2 problems:

1. The system seems to reload every week or so which in itself is bad enough,  but when it reloads it is backnto default config.

2. A slightly lesser issue is that the monitor isnt showing any of the traffic from interfaces in the sam sec zone even though logging is enabled. Is this normal?

I'm opening a TAC case on monday morning but was wondering if anyone has had similar issues.

Thanks in advance

Wes

[HULK]

Hello Wes,

Could you please try below mentioned CLI command to verify the PAN firewall is generating traffic logs or not.

> show logging-status

> debug log-receiver statistics

Logging statistics

------------------------------ -----------

Log incoming rate:             0/sec

Log written rate:              0/sec  >>>>>>>>>>>>> apply the same command multiple times and verify the rate

Corrupted packets:             0

Corrupted URL packets:         0

Logs discarded (queue full):   0

Traffic logs written:          0  >>>>>>>>>>>>> verify the rate ( it should be non-zero)

> show system resources follow 

Press  >>> Shift+M   and verify how much CPU has been taken by management-server process. Is there any process taking too much CPU.

Could you please restart, log receiver and management-server process and verify if that makes any changes.

Management server process functionality- Management backend, take care of configuration management, commit, reporting, etc.

Logrcvr process- Recording traffic log send by DP

> debug software restart log-receiver

> debug software restart management-server

After applying above 2 commands, please wait for 1 min and again login into the PAN FW and verify traffic logs.

Thanks