SYSTEM ALERT: Version 5.0.5

[Oleksandr]

Hi All,

After upgrading to version 5.0.5 i have a strange thing....

---

severity: high

opaque: HA Group 1: Peer version of 5.0.5 not compatible with the HA2 keep-alive setting; disabling HA2 keep-alive

---

severity: critical

opaque: HA Group 1: All HA1 connections down

----

Am I missing something?

Regards,

Alex

[VinceM]

HI,

Both of you palo have been upgraded in 5.0.5 ?

What was your previous version ?

v.

[Oleksandr]

HI,

Yes,

Previous version was 5.0.4

Regards,

Alex

[VinceM]

have you try o suspend your backup device and unsuspend ?

v.

[Oleksandr]

no, but how can it helps?

Must I do it?

Regards,

Alex

[VinceM]

Hi,

No risk to do on the passiv device.

Does your HA1 and HA2 connection are up ? does ycluster is fonctionnal ?

v.

[Oleksandr]

yes,

It happened at 1 am this night, maybe after auto upgrading of new "Applications and Threats".

And , afterwards, all working fine again

Regards,

Alex

[VinceM]

better thing in this case (if everything is fonctionnal) should be to generate a tech support and open a case. Support should be able to find the issue.

V.

[gswcowboy]

Typically, at 1am, you will have daily reports generate in addition to your dynamic updates so lots of action on the MP at that time. I would recommend staggering your dynamic updates (ie., apps/threats download/install at 2am and AV download/install at 3am). That being said, we won't know true root cuase until a case is opened with Support and/or Reseller and a TS file attached to the case. Just my 2 cents.    

[panos]

this happened to us on 5.0.4

we opened a case.

we mentioned that The management plane was so busy at this time that it was not able to process the HA messages that are received from the physical HA links.

1)configure

commit all

exit

2) debug software restart management-server (wait for a minute to let it complete)

3) debug software restart device-server (wait for a minute to let it complete)

4) if above steps does not help, disable HA, remove HA configs, commit it, enable and configure HA and commit and follow steps above .