08-05-2021 07:48 AM
Hello!
We have about 10 offices, each of them has a firewall, all of them are under Panorama control. Some of these firewalls cannot register in the Cortex Data Lake, if I try to add them manually there, I see the Certificate Status "Needs certificate".
Licenses aren't expired. I tried steps from that doc:
and this:
nothing helps.
08-05-2021 10:26 AM
Are the firewalls all part of the same CSP account?
08-05-2021 09:53 PM
I think yes. All firewalls belong to one organization, all of them I can see in one place on Palo Alto portal and all of them are managed from one Panorama.
08-05-2021 09:59 PM
From this solution:
When I added command: request logging-service-forwarding certificate fetch
after maybe 30 sec I checked the job (show jobs all) and this job was failed:
08-06-2021 07:49 AM
Based on your previous comments, you tried some good troubleshooting.
From Panorama, go to Panorama tab, device deployment, licensing , click refresh. select one of the bad firewalls and click refresh
You can also try to restart the management server using command
debug software restart process management-server
What version of pan-os?
08-08-2021 10:58 PM - edited 08-08-2021 10:59 PM
I have a 10.0.6 version of PAN-OS on Panorama and on one of the bad firewalls (on another bad firewalls I have 9.1.3h ver.). And I have refreshed licenses from Panorama as you advised, unfortunatelly it didn't help.
About restarting the management server: you talk about Panorama or firewall?
08-11-2021 01:54 AM
I repeated all steps and use command "debug software restart process management-server" in the end and it didn't help.
08-11-2021 12:22 PM
I would suggest opening a ticket with Cortex team, they will be able to help
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
