Panorama takes excessive time to complete commit to firewalls, stuck at 50%

cancel
Showing results for 
Search instead for 
Did you mean: 

Panorama takes excessive time to complete commit to firewalls, stuck at 50%

L1 Bithead

The push to the standby firewall occurs quickly (1-3 minutes).

The push to the active firewall is stuck for a long time. I notice the config does finally get to the active firewall, but Panorama still shows push in progress.

Note in the second picture that the push completed to the standby firewall already, but stuck at the active firewall.

 

Panorama push stuck at 50-1.JPGPanorama push stuck at 50-2.JPG

4 REPLIES 4

Cyber Elite
Cyber Elite

Hello there.

 

In Panorama, you may  know that you can Push to Devices and then choose what information to push (either template or device group).  I would ask that you Push to Panorama, and then, when you are ready, Push to Devices,

 

SteveCantwell_0-1620864603532.png

Choose the Edit Selections and push ONLY Templates,  see how the length of time.

Then push again, Edit Selection, and now ONLY Device Group.

You can even push to just the Active FW (deselect the Passive)

 

One of those should help to see why it takes so long...

Help the community: Like helpful comments and mark solutions

Cyber Elite
Cyber Elite

@bkoch709 

Are you doing Commit to Panorama and then Push to devices or Commit and Push?

Does Push to the Panorama also takes long time?

 

Regards

MP

I am doing a commit and push. The Panorama commit goes just fine.



What we did find was that after the upgrade from 9.1.5 to 9.1.8 on panorama, the check box for "Share Unused Address and Service Objects with Devices" was turned back on.


@bkoch709 

 

Yes those settings are fine.

 

Regards

MP
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!