Panorama messages.

[Sourav_Saha]

hi.

 Any idea why panorama suddenly started sending this messages a lot 

opaque: gRPC connection to iot.services-edge.paloaltonetworks.com:443 is broken, error: fail to parseTlsCert, err fail to load client cert[/root/client.pem], err open /root/client.pem: no such file or directory time: 2020-08-10 10:53:30

and how to fix this ?

Thanks !!

[Remo]

Did you recently updated panorama to PAN-OS 10?

[Sourav_Saha]

Yes

[Remo]

So the next somehow obvious question: Is your panorama allowed to connect to iot.services-edge.paloaltonetworks.com:443 or is there another device/firewall in place that blocks this connection?

[Sourav_Saha]

if the link is not malicious, it should work 

[Remo]

Actually this looks like this known issue:

Did you try to restart panorama?

Source: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-release-notes/pan-os-10-0-release-information/k...

[Sourav_Saha]

It did not work. 

[Remo]

so first I would make sure if this connection really is possible and not blocked anwhere and second you may want to open a support case as PAN-OS 10 is still very new and this might also be a so far not known bug which needs to be fixed in a future release.

[Sourav_Saha]

The traffic is not being blocked, 

[MShaw4]

What is your "Device Certificate Status"?  If you don't have a valid certificate, you'll see this issue.

[NehruKandasamy]

I am having valid cert and did all the above suggestion to stop this alert, still pursuing since upgrade Panorama 10.0.7 version, please post any fix for it. In the meantime we open a case with TAC.

[TunaDinc]

I have exactly the same problem with 10.0.7. Did anyone ever find a solution?

[NguyenJimmy]

I also experience this error logs with version 11.1.2-h4.  Please share resolution as you got from PA TS.  Thanks,