FW stops forwarding files to WF 500

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

FW stops forwarding files to WF 500

L2 Linker

Hi,

We have a PA-5250 that suppose to send files to a WF-500 appliance.

Both are at 10.2.3 version.

The FW suddenly stopped sending file to our private wildfire cloud.

When we checked the "wildfire-upload.log" we see the following:

"cancelled - first"

"cancelled - concurrent file limit"

"cancelled - by DP"

AmitKa79_2-1678982036842.png

Does anyone knows what can be the reason for the forwarding cancellations based on the logs provided?

If needed, I might be able to provide other logs as well.

 

Thanks

Amit

1 REPLY 1

L6 Presenter

Have you checked the hard disks on the firewall and wildfire appliance?

 

https://live.paloaltonetworks.com/t5/general-topics/knowledge-sharing-troubleshooting-and-investigat...

 

 

Also you can just be hitting a limit on the firewall or wildfire appliance  for fileuploads or someone to have configured a limit. If the issue you are seeing happens only during working hours, where there is a lot of traffic and files then probably it is a device/license limits.

 

Check the articles below:

 

https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/submit-files-for-wildfire-analysis/fir...

 

 

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGoCAK

 

 

  • 706 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!