The people complain about slow commit

[migration]

Whenever we make a PoC, Everybody complains about slow commit.

As far as I know, the traffic is not effected during the commit.

But people request faster commit

First, How can we explain slow commit to people technically.

Secondly, Is there any plan to improve commit process?

Thanks.

[CWillms]

I must say I agree with this sentiment. I do realize that the production traffic is not being affected during the process, but it is disconcerting since this traffic is business critical and you're left wondering "is everything alright?" It a perception thing. Most high-end network gear saves changes significantly faster than this. My 2 cents.

[mharding]

Depends on what you are changing in your commit, and your hardware. A PA-500 is not as fast as a PA-4060.

Simple configuration changes to the policies go quickly. Changes to the app or threat database take awhile because the entire database must be recomplied. That is my understanding.

[James]

I Believe the choice is something like this:

Fast Save - Slow Performance all the time (With Features Enabled)

Slightly slow save - blindingly fast box with low latency with all features switched on.

With a slight reminder, that during a POC there are a lot of saves - in production, there are probably not so many.  So what appears to be an annoying problem goes away.

Also, the validation checks with things like rule shadowing alerts and so on that other devices just ignore and let you configure.

Hope this helps

Thanks

James

[friento]

Using 4050 and commit business is a hit or miss on my end. Sometimes it commits in 5 mins but lately I will be waiting for it and show jobs all will show 0% for a long time. It so maddenning when you are troubleshooting a rule and trying to get it fix asap. Is there any plan to help us fix this issue?

Now my commit takes close to 20 mins!!!!!!!

[gswcowboy]

Are you running PANOS 4.05? Are you able to see the any resources spike, specifically the mgmtsrvr and devsrvr daemons? Are there any core files generated? Run the >show system files to determine if you have any new files ending in .tgz format? Otherwise, please call into PAN Support so we can document your case and proceed with troubleshooting @friento.

Regards,

Renato

[friento]

Yes version 4.05. And no new file all I have is from Sept.

Will try to open support call.

[gswcowboy]

Thanks for the update. If resources on the management plane is taxed, we'd love to take a look and debug on your behalf. 20 minutes is definitely not normal behavior.

Regards,

Renato

[Systemsmngr]

I stopped using IE and changed to Firefox. Still not as fast as version 3.x, but better than IE.

[dkhoe]

I was on the phone with a Palo Alto engineer once because we had a ticket for slow commits and during the phone call the example commit took 30 minutes with our 4050...

Imagine you are getting attacked at the application level... 10 minutes to modify/create a policy... 20-30 minutes for the commit...