Telemetry cant connect : Server is not reachable

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Telemetry cant connect : Server is not reachable

L2 Linker

Hi Support,

The telemetry unable to connect to server.

-Device Health and Performance

-Product Usage

-Threat Prevention

 

All same error

Status : Failed

Reason : Server not reachable

 

Follow in https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClZCCA0

 

Update server configuration was set to updates.paloaltonetworks.com.
We try setting configuration to staticupdates.paloaltonetworks.com but unsuccessful 

FW has been restarted still unreachable.

 

Any idea what happen ? and workaround to check 

1 accepted solution

Accepted Solutions

Hi Otakar,

 

We have open the case and we are seeing 'no route to host error'. It started to work after we add IP address to the customize service route destination. We are using URLs previously.

 

Issue: URL Destiantion service route not working on AE sub interface.
Analysis: I have seen other users are reporting the same and this is expected behavior, currently the AE subinterface is not working when using the URL destination service route.

The current official supported destination filed is ip address only, although we can take advantage of FQDN in physical NIC service route enviroment.
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/device/device-setup-services...
In this case we probably need to stay on the ip based destination route.

 

adding ip address is not a permanent solution.
Unfortunately, there is no official solution yet, we manually added the IP address(manually resolve it to ip address) to work around the issue at this moment.


We do have an improvement in V11, the CDL will be added to the service route and telemetry will take advantage of that.

View solution in original post

3 REPLIES 3

Community Team Member

Hi @isentric89 ,

 

Usually the management interface is out of band and doesn't have internet access.  Is that the case here ?

Alternatively you can use service routes if the management interface is not an option (https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clp3CAC).

 

Hope it helps,

-Kiwi.

 
LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

Cyber Elite
Cyber Elite

Hello,

I've been having the same issues for several weeks. I have a case open, so if you open a case, maybe there is a bug?

Regards,

Hi Otakar,

 

We have open the case and we are seeing 'no route to host error'. It started to work after we add IP address to the customize service route destination. We are using URLs previously.

 

Issue: URL Destiantion service route not working on AE sub interface.
Analysis: I have seen other users are reporting the same and this is expected behavior, currently the AE subinterface is not working when using the URL destination service route.

The current official supported destination filed is ip address only, although we can take advantage of FQDN in physical NIC service route enviroment.
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/device/device-setup-services...
In this case we probably need to stay on the ip based destination route.

 

adding ip address is not a permanent solution.
Unfortunately, there is no official solution yet, we manually added the IP address(manually resolve it to ip address) to work around the issue at this moment.


We do have an improvement in V11, the CDL will be added to the service route and telemetry will take advantage of that.

  • 1 accepted solution
  • 5689 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!