Panorama takes excessive time to complete commit to firewalls, stuck at 50%

[bkoch709]

The push to the standby firewall occurs quickly (1-3 minutes).

The push to the active firewall is stuck for a long time. I notice the config does finally get to the active firewall, but Panorama still shows push in progress.

Note in the second picture that the push completed to the standby firewall already, but stuck at the active firewall.

[S.Cantwell]

Hello there.

In Panorama, you may  know that you can Push to Devices and then choose what information to push (either template or device group).  I would ask that you Push to Panorama, and then, when you are ready, Push to Devices,

Choose the Edit Selections and push ONLY Templates,  see how the length of time.

Then push again, Edit Selection, and now ONLY Device Group.

You can even push to just the Active FW (deselect the Passive)

One of those should help to see why it takes so long...

[MP18]

@bkoch709 

Are you doing Commit to Panorama and then Push to devices or Commit and Push?

Does Push to the Panorama also takes long time?

Regards

[bkoch709]

I am doing a commit and push. The Panorama commit goes just fine.



What we did find was that after the upgrade from 9.1.5 to 9.1.8 on panorama, the check box for "Share Unused Address and Service Objects with Devices" was turned back on.

[MP18]

@bkoch709 

Yes those settings are fine.

Regards