Wildfire Events "failed to establish or resume a secure session"

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Wildfire Events "failed to establish or resume a secure session"

L4 Transporter

Hello

 

I Have a Cluster active-passive PA-820 version 10.0.7

 

I am receiving the following system events continuously

 

Alpalo_0-1631721155628.png

 

I have configured eu.wildfire.paloaltonetworks.com and wildfire.paloaltonetworks.com but the problem persists.

 

Alpalo_1-1631721179895.png

 

Can someone help me?

 

Thanks so much

 

18 REPLIES 18

L0 Member

Hey,

 

Your NGFW is still trying to connect to WildFire every minute like the update-schedule is still there.  Maybe the config is in the CLI, but not the GUI.  Could you run the commands > "set cli config-output-format set", > "configure", and # "show deviceconfig system update-schedule"?  If the wildfire is still there, I would delete the whole section with "delete deviceconfig system update-schedule" and then add the pieces that you want back.  You can copy and paste the CLI for the other sections to quickly add them back.  You can also "commit" on the CLI.

collarspace

All the best !

Hello,

 

Thanks for your response...but I I tried to do it before but it doesn't work...

 

I still have the events

 

this are the config and events:

 

show deviceconfig system update-schedule
set deviceconfig system update-schedule threats recurring sync-to-peer yes
set deviceconfig system update-schedule threats recurring daily at 02:00
set deviceconfig system update-schedule threats recurring daily action download-and-install
set deviceconfig system update-schedule anti-virus recurring daily at 03:00
set deviceconfig system update-schedule anti-virus recurring daily action download-and-install
set deviceconfig system update-schedule anti-virus recurring sync-to-peer yes
[edit]

 

Alpalo_0-1632308111568.png

 

Cyber Elite
Cyber Elite

Hi @Alpalo ,

 

You did this?  Once you do the command it should be blank.

 

admin@ngfw# delete deviceconfig system update-schedule

[edit]
admin@ngfw# show deviceconfig system update-schedule

[edit]
admin@ngfw#  

 

Thanks,

 

Tom

Help the community: Like helpful comments and mark solutions.

Yes but the problem still continues, I will open a ticket with Paloalto Tac.


Regards

  • 6887 Views
  • 18 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!