SYSTEM ALERT : high : SSL connect error

[bobby549049]

Have any body got such error message as below:

domain: 1
receive_time: 2012/02/13  19:10:00
serial: 0002C123456
seqno: 0
actionflags: 0x0
type:  SYSTEM
subtype: general
config_ver: 0
time_generated: 2012/02/13  19:10:00
vsys:
eventid: general
object:
fmt: 0
id: 0
module:  general
severity: high
opaque: SSL connect error(10.2.1.1): 5, source:  10.3.1.250

We got a lot of such event and the mail box is going to full due to this alert mail.

[mikand]

Did you check so the SSL is correct at your 10.2.1.1 server? Perhaps it expired or something else that makes the SSL to fail when connecting?

[bobby549049]

This is one Window AD domain server (10.2.1.1) and PAN Agent has been installed.

The SSL certificate should not have any error.

The key issue is that the system administrator receives a lot of the alert message.

This is not reasonable if this cause is certificate expired.

[bvandivier]

Hi Bobby, could you please confirm what version of PAN-OS you are running on the device in question as well as the version of your PAN Agent?  These errors may be related to a version mis-match between your firewall and the pan/userid agent.

[bobby549049]

Pan-Agent is version 3.1.2 and Pan-OS is version 4.0.9

[jnguyen]

I would suggest you open a case online and provide a tech support file for further debugging.