User-ID redistribution SSL error

[Marck.To]

Hello,

I am trying to configure to 2 PA to share their user-id data.

I used the following guide: https://www.paloaltonetworks.com/documentation/60/pan-os/pan-os/user-id/configure-a-firewall-to-shar...

Version is 6.0.10

- Communication is done through mgt interface

- Both User-Id and HTTPS are enabled on the interface

- tcpdump shows that connectivity is ok

Log from the PA agent:

2016-02-05 16:18:45.056 +0100 Error:  pan_ssl_conn_open(pan_ssl_utils.c:464): Error: Failed to Connect to x.x.x.x (source: x.x.x.x), SSL error: error:00000000:lib(0):func(0):reason(0)(0)

Log from PA Collector:

2016-02-05 16:18:50.077 +0100 Error:  pan_ssl_conn_accept(pan_ssl_utils.c:554): Failed to accept ssl connect from x.x.x.x/51772
2016-02-05 16:18:50.077 +0100 Error:  pan_user_id_client_proc(pan_user_id_client.c:2591): pan_user_id_client_accept() failed

Any ideas?

[glastra1 · Accepted solution]

Have you verified both firewalls are running 550+ and reset the user-ID daemon?

https://live.paloaltonetworks.com/t5/General-Topics/Notice-of-PAN-OS-SSL-Certificate-Expiration/m-p/...

regards,

Gerardo.

[Marck.To]

worked great. Thanks !