We are import PA5220 firewall backup ( selecting import shared object) into Panorama VM , but stucked at 99% since last 48 hours.
If we unselect import shared object , job is completing in minutes. But while selecting shared object option its taking time.
There are 16000 objects in PA5220 firewall.
What could be the reason for slowness in import job ?
Is it because of object counts or Panorama resource ?
I am having the same issue.
We tried to import a PA-5250 with up to 40 000 objects and job stayed at 99%.
No error, no warning and no indication in config.log and ms.log.
It stays at 99% for more than 4 hours, and when we tried to cancel the job ... we couldn't. the message said: "Cannot stop job 21531 at this time".
So contacted TAC, and after several log investigation, we decided to restart the management server to clear the job, and attempt the device configuration import again. And agan it stays at 99%.
The thing is that the job is not hunged or in error. Looks like it works in the background but no clues on what it doing.
May be we should let it run for several hours due to the high number of objects ?
TAC is investigating the issue.
We have recently hit the same issue, I wonder what version of code you had during this problem?
I would assume that that you could just make the imported firewalls standalone again (at this point they are not actually in Panorama) and then restart the management server on the Panorama, I appreciate this was a while ago now but could you share any info that TAC provided?
I remember, there is a new documented behavior (I reviewed the KB) about some commit taking a long time due to a check during the commit.
But I don't think this was in PAN-OS 9.1.
Need to check on Monday, I will update the post.
Update: my bad, the KB is about the number of rules (not the number of objects), and it started from 10.1
PCSNE - CISSP
Best Effort contributor
Check out our PANCast Channel
Disclaimer : All messages are my personal ones and do not represent my company's view in any way.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!