About SDorsey

SDorsey · ‎08-21-2013

It has been orange for about four days. 😛 After the past reboot, it has been powered on for a full 24 hours.

SDorsey · ‎08-21-2013

Greetings all! I have a pan200 with an orange status light. Power, fan and temp are all green. Status stays this way through reboots and the web server on the mgmt port is not responding. If I console in, the only issues I have seen so far are the TP licenses just expired. I would love some pointers are troubleshooting commands to run to figure out what is going on.

SDorsey · ‎07-22-2013

That just helped me out too! Thanks for the info.

SDorsey · ‎02-15-2013

Nevermind! I found the option within Windows NPS under Polices > Network Policies and added a condition to the policy for the PAN connection. Thanks!

SDorsey · ‎02-15-2013

What is the best way to accomplish this? I have the VPN setup with Radius auth and working correctly but in its current setup, ANY A.D. account can connect to VPN. I have already created the security groups to reference for access in A.D., just not sure where to just the access.

SDorsey · ‎02-15-2013

Do you know if this will be address in 5.0.3? My client uses QOS and the statistics graphing didn't work correctly in 5.0.1 so I upgraded them to 5.0.2. I would prefer not to downgrade back to 4.x.x as others have done.

SDorsey · ‎02-15-2013

Thanks for the information! I can't beat up PAN because I love their devices and resell them like crazy but it seems like every other software version has a quirk.

SDorsey · ‎02-15-2013

top - 07:43:30 up 24 days, 13:24, 1 user, load average: 8.62, 8.59, 8.26 Tasks: 104 total, 1 running, 101 sleeping, 1 stopped, 1 zombie Cpu(s): 14.0%us, 23.5%sy, 8.9%ni, 53.2%id, 0.2%wa, 0.0%hi, 0.1%si, 0.0%st Mem: 995872k total, 928432k used, 67440k free, 23456k buffers Swap: 2008084k total, 326932k used, 1681152k free, 166964k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 2473 20 0 190m 65m 63m S 179 6.7 23008:07 useridd 3284 20 0 4468 1032 800 R 3 0.1 0:00.05 top 19080 30 10 3896 1344 1104 S 3 0.1 1:03.09 genindex.sh 2288 0 -20 65244 4796 2048 S 2 0.5 47:29.27 masterd_core 2305 15 -5 36820 2192 1256 S 2 0.2 331:09.30 sysd 2506 20 0 308m 53m 1992 S 2 5.5 6:34.11 logrcvr 1 20 0 1836 564 536 S 0 0.1 0:00.97 init 2 20 0 0 0 0 S 0 0.0 0:00.00 kthreadd 3 RT 0 0 0 0 S 0 0.0 0:12.55 migration/0 4 20 0 0 0 0 S 0 0.0 0:00.62 ksoftirqd/0 5 RT 0 0 0 0 S 0 0.0 0:15.73 migration/1 6 20 0 0 0 0 S 0 0.0 0:00.68 ksoftirqd/1 7 20 0 0 0 0 S 0 0.0 2:00.96 events/0 8 20 0 0 0 0 S 0 0.0 1:27.67 events/1 9 20 0 0 0 0 S 0 0.0 0:00.04 khelper 12 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr 112 20 0 0 0 0 S 0 0.0 0:00.01 sync_supers 114 20 0 0 0 0 S 0 0.0 0:00.01 bdi-default 115 20 0 0 0 0 S 0 0.0 0:05.13 kblockd/0 116 20 0 0 0 0 S 0 0.0 0:01.88 kblockd/1 125 20 0 0 0 0 S 0 0.0 0:00.00 ata/0 126 20 0 0 0 0 S 0 0.0 0:00.00 ata/1 127 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux 132 20 0 0 0 0 S 0 0.0 0:00.00 khubd 135 20 0 0 0 0 S 0 0.0 0:00.00 kseriod 156 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0 157 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1 172 20 0 0 0 0 S 0 0.0 8:53.86 kswapd0 173 20 0 0 0 0 S 0 0.0 0:00.00 aio/0 174 20 0 0 0 0 S 0 0.0 0:00.00 aio/1 175 20 0 0 0 0 S 0 0.0 0:00.00 nfsiod 732 20 0 0 0 0 S 0 0.0 0:00.39 octeon-ethernet 760 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0 765 20 0 0 0 0 S 0 0.0 0:00.96 mtdblockd 793 20 0 0 0 0 S 0 0.0 0:00.00 usbhid_resumer 833 20 0 0 0 0 S 0 0.0 0:39.23 kjournald 886 16 -4 1996 404 400 S 0 0.0 0:01.19 udevd 1843 20 0 0 0 0 S 0 0.0 0:01.09 kjournald 1844 20 0 0 0 0 S 0 0.0 0:00.00 kjournald 1973 20 0 0 0 0 S 0 0.0 1:11.37 flush-8:0 2036 20 0 2008 628 572 S 0 0.1 0:00.99 syslogd 2039 20 0 1892 332 328 S 0 0.0 0:00.01 klogd 2048 20 0 1872 328 236 S 0 0.0 0:00.84 irqbalance 2056 rpc 20 0 2084 492 488 S 0 0.0 0:00.01 portmap 2074 20 0 2116 652 648 S 0 0.1 0:00.06 rpc.statd 2143 20 0 6868 744 640 S 0 0.1 0:00.01 sshd 2191 20 0 6804 432 428 S 0 0.0 0:00.01 sshd 2200 20 0 3280 596 592 S 0 0.1 0:00.01 xinetd 2219 20 0 0 0 0 S 0 0.0 0:00.00 lockd 2220 20 0 0 0 0 S 0 0.0 2:13.63 nfsd 2221 20 0 0 0 0 S 0 0.0 2:09.43 nfsd 2222 20 0 0 0 0 S 0 0.0 2:05.24 nfsd 2223 20 0 0 0 0 S 0 0.0 2:05.25 nfsd 2224 20 0 0 0 0 S 0 0.0 2:08.65 nfsd 2225 20 0 0 0 0 S 0 0.0 2:08.85 nfsd 2226 20 0 0 0 0 S 0 0.0 2:11.04 nfsd 2227 20 0 0 0 0 S 0 0.0 2:13.55 nfsd 2230 20 0 2488 688 580 S 0 0.1 0:03.51 rpc.mountd 2291 20 0 1888 456 452 S 0 0.0 0:00.00 agetty 2298 0 -20 27864 1508 1128 S 0 0.2 5:34.42 masterd_manager 2307 0 -20 32356 5180 1148 S 0 0.5 79:07.52 masterd_manager 2313 20 0 91736 3328 2064 S 0 0.3 0:03.03 dagger 2314 30 10 40568 3784 1808 S 0 0.4 62:58.04 python 2315 20 0 77772 2912 1644 S 0 0.3 0:07.70 cryptod 2316 20 0 166m 1868 1260 S 0 0.2 6:58.26 sysdagent 2321 20 0 7212 1100 1096 S 0 0.1 0:00.09 tscat 2333 20 0 71580 1168 1020 S 0 0.1 0:20.37 brdagent 2334 20 0 31912 1208 1040 S 0 0.1 1:07.53 ehmon 2335 20 0 47496 1180 1044 S 0 0.1 0:01.43 chasd 2422 20 0 0 0 0 S 0 0.0 0:02.82 kjournald 2463 20 0 2896 624 572 S 0 0.1 0:00.62 crond 2471 20 0 579m 304m 4256 S 0 31.3 71:53.12 mgmtsrvr 2496 20 0 214m 56m 8280 S 0 5.8 28:22.07 devsrvr 2505 20 0 91692 2916 2064 S 0 0.3 1:16.70 ikemgr 2507 20 0 99776 2540 1880 S 0 0.3 0:03.63 rasmgr 2508 20 0 97656 1520 1160 S 0 0.2 18:46.81 keymgr 2509 20 0 247m 2484 1652 S 0 0.2 3:30.72 varrcvr 2510 17 -3 56644 1848 1324 S 0 0.2 4:56.59 ha_agent 2511 20 0 111m 7856 1664 S 0 0.8 0:31.33 satd 2512 20 0 101m 2152 1428 S 0 0.2 0:07.89 sslmgr 2513 20 0 57132 1868 1464 S 0 0.2 0:02.34 dhcpd 2514 20 0 74608 2472 1528 S 0 0.2 0:03.04 dnsproxyd 2515 20 0 74388 1836 1460 S 0 0.2 0:03.78 pppoed 2517 20 0 142m 2604 1500 S 0 0.3 6:37.54 routed 2518 20 0 129m 4632 3640 S 0 0.5 0:14.07 authd 2973 20 0 21340 2476 2044 S 0 0.2 0:00.13 sshd 3028 20 0 27260 1368 1184 S 0 0.1 0:02.31 snmpd 3078 nobody 20 0 254m 59m 4120 S 0 6.1 69:26.59 appweb3 3147 ksaadmin 20 0 21340 1480 1036 S 0 0.1 0:00.00 sshd 3148 ksaadmin 20 0 97744 22m 11m S 0 2.3 0:03.12 cli 3280 ksaadmin 20 0 2976 668 564 S 0 0.1 0:00.03 less 3282 20 0 3832 1192 1056 S 0 0.1 0:00.07 sh 3285 20 0 1940 536 464 S 0 0.1 0:00.01 sed 4339 nobody 20 0 154m 10m 3304 S 0 1.0 2:31.39 appweb3 4357 nobody 20 0 180m 6516 2420 S 0 0.7 1:42.07 appweb3 18016 20 0 3980 3848 2956 S 0 0.4 0:00.03 ntpd 18868 30 10 0 0 0 Z 0 0.0 0:00.02 sh <defunct> 19031 20 0 2960 492 412 S 0 0.0 0:00.00 crond 19032 20 0 3720 1092 976 S 0 0.1 0:00.02 genindex_batch. 19039 20 0 33704 5040 2940 S 0 0.5 0:00.34 masterd_batch 26949 30 10 62864 26m 1884 T 0 2.7 0:27.14 bot_monitor.py 28754 20 0 2960 440 400 S 0 0.0 0:00.00 crond 28755 20 0 3720 852 772 S 0 0.1 0:00.00 bash 28756 20 0 33704 3176 1956 S 0 0.3 0:00.59 masterd_batch

SDorsey · ‎02-15-2013

Thanks for offering to help! This is a PAN 500 running 5.0.2. I disabled most of my application identification and ssl decryption to see if it would help yesterday but it did not. Here is the output: top - 07:38:52 up 24 days, 13:19, 1 user, load average: 9.40, 8.21, 8.05 Tasks: 105 total, 2 running, 101 sleeping, 1 stopped, 1 zombie Cpu(s): 14.0%us, 23.5%sy, 8.9%ni, 53.2%id, 0.2%wa, 0.0%hi, 0.1%si, 0.0%st Mem: 995872k total, 917440k used, 78432k free, 19900k buffers Swap: 2008084k total, 327700k used, 1680384k free, 161728k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 2473 20 0 190m 65m 63m S 175 6.7 22999:50 useridd 1701 30 10 46936 5384 2872 R 9 0.5 0:00.28 pan_logdb_index 1705 20 0 4468 1032 800 R 3 0.1 0:00.04 top 2508 20 0 97656 1520 1160 S 2 0.2 18:44.14 keymgr 1 20 0 1836 564 536 S 0 0.1 0:00.97 init 2 20 0 0 0 0 S 0 0.0 0:00.00 kthreadd 3 RT 0 0 0 0 S 0 0.0 0:12.55 migration/0 4 20 0 0 0 0 S 0 0.0 0:00.62 ksoftirqd/0 5 RT 0 0 0 0 S 0 0.0 0:15.73 migration/1 6 20 0 0 0 0 S 0 0.0 0:00.68 ksoftirqd/1 7 20 0 0 0 0 S 0 0.0 2:00.95 events/0 8 20 0 0 0 0 S 0 0.0 1:27.66 events/1 9 20 0 0 0 0 S 0 0.0 0:00.04 khelper 12 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr 112 20 0 0 0 0 S 0 0.0 0:00.01 sync_supers 114 20 0 0 0 0 S 0 0.0 0:00.01 bdi-default 115 20 0 0 0 0 S 0 0.0 0:05.13 kblockd/0 116 20 0 0 0 0 S 0 0.0 0:01.88 kblockd/1 125 20 0 0 0 0 S 0 0.0 0:00.00 ata/0 126 20 0 0 0 0 S 0 0.0 0:00.00 ata/1 127 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux 132 20 0 0 0 0 S 0 0.0 0:00.00 khubd 135 20 0 0 0 0 S 0 0.0 0:00.00 kseriod 156 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0 157 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1 172 20 0 0 0 0 S 0 0.0 8:53.86 kswapd0 173 20 0 0 0 0 S 0 0.0 0:00.00 aio/0 174 20 0 0 0 0 S 0 0.0 0:00.00 aio/1 175 20 0 0 0 0 S 0 0.0 0:00.00 nfsiod 732 20 0 0 0 0 S 0 0.0 0:00.39 octeon-ethernet 760 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0 765 20 0 0 0 0 S 0 0.0 0:00.96 mtdblockd 793 20 0 0 0 0 S 0 0.0 0:00.00 usbhid_resumer 833 20 0 0 0 0 S 0 0.0 0:39.21 kjournald 886 16 -4 1996 404 400 S 0 0.0 0:01.19 udevd 1595 20 0 21340 2472 2040 S 0 0.2 0:00.13 sshd 1628 ksaadmin 20 0 21340 1480 1036 S 0 0.1 0:00.00 sshd 1629 ksaadmin 20 0 97744 22m 11m S 0 2.3 0:03.20 cli 1702 ksaadmin 20 0 2976 668 564 S 0 0.1 0:00.05 less 1704 20 0 3832 1192 1056 S 0 0.1 0:00.06 sh 1706 20 0 1940 540 464 S 0 0.1 0:00.01 sed 1843 20 0 0 0 0 S 0 0.0 0:01.09 kjournald 1844 20 0 0 0 0 S 0 0.0 0:00.00 kjournald

SDorsey · ‎02-14-2013

I have a PAN fw at a client site that always has the mgmt plane cpu at 100%. The data plane CPU barely ever goes above 10%. Is there an easy way to troubleshoot the cause of this or what is taking up so much CPU usage?

SDorsey · ‎01-23-2013

So I put this off for a few days and just came back to it. I realized that going to the GP portal yielded a green URL bar so it chained correctly. Then I went to the device and noticed it no longer had the cert chain errors upon commit and was decrypting the SharePoint traffic correctly. My only guess is that once the cert information is changed, maybe it takes the PAN a bit to make those changes?

SDorsey · ‎01-22-2013

I have tried contacting support but my client I guess paid for their support through ComputerLinks. PAN said that because of this, I have to go through ComputerLinks for support. ComputerLinks has been less than ideal. Thanks for your guidance thus far though!

SDorsey · ‎01-22-2013

This may be related but I cannot get the GlobalProtect portal working correctly with the cert either. I changed the GP Portal to use the GD cert I designated for it and commited it. When visiting the site, it still does not show green for HTTPS and when I click to view the cert, it shows "localhost" as the cert name even though I changed it to the GD cert under GlobalProtect Portal.

SDorsey · ‎01-22-2013

That is actually the document I followed to get the correct cert from IIS. GoDaddy provides two certs, the end cert and the intermed. cert. I uploaded the end cert from IIS and the Intermed cert. In the Cert. panel of the PAN UI, it correctly shows the end cert nested under the Intermed. cert. I do NOT have the forward trust/untrust boxes checked because this is not for outgoing decryption. This is for inbound inspection.

SDorsey · ‎01-22-2013

Thanks for the info. I went ahead and converted the intermed. cert and end cert to PEM and uploaded to the firewall. I am however now getting an error when I commit that it cannot complete the certificate chain for that certificate. I checked the PAN's Trusted Root CA section and GoDaddy IS listed. Ideas?

Member Since	‎04-18-2012 08:18 AM
Date Last Visited	‎10-27-2020 06:38 PM
Posts	149
Total Likes Received	23

Online Status	Offline
Date Last Visited	‎10-27-2020 06:38 PM

About SDorsey

Re: Unable to login to Minemeld WebUI

Re: Invalid Role - RADIUS

Invalid Role - RADIUS

Re: Wildfire cannot test some Word docs - unsupported file type

Re: Wildfire cannot test some Word docs - unsupported file type

Wildfire cannot test some Word docs - unsupported file type

Re: Restart daemons/services

Re: Restart daemons/services

Restart daemons/services

6.1.3 update issue: Threat database handler failed

IPSEC Tunnel to ASA - PeerID issues

Re: IPSEC Tunnel to ASA - PeerID issues

Re: Block internet access using Opera Mini

Re: 6.0.5 h3 explanation

Re: Who's using an MSSP for security monitoring?

Re: Who's using an MSSP for security monitoring?

Re: PANOS 6.1 Related Log Detail View Enhancements

Re: 6.0.5 h3 explanation

Re: Possible Issues with 6.0.5-h3

Re: 6.0.5 h3 explanation

Nominated Discussion: Creating an IPSEC Tunnel to ASA

Re: Troubleshooting device with orange status light

Troubleshooting device with orange status light

Re: problem with groups in user-id mapping

Re: Setup SSLVPN w/ Radius Auth and limit to specific A.D. groups

Setup SSLVPN w/ Radius Auth and limit to specific A.D. groups

Re: Mgmt Plane Always high CPU

Re: Mgmt Plane Always high CPU

Re: Mgmt Plane Always high CPU

Re: Mgmt Plane Always high CPU

Mgmt Plane Always high CPU

Re: Setup SSL Inbound Inspection with 3rd party certs

Re: Setup SSL Inbound Inspection with 3rd party certs

Re: Setup SSL Inbound Inspection with 3rd party certs

Re: Setup SSL Inbound Inspection with 3rd party certs

Re: Setup SSL Inbound Inspection with 3rd party certs

Unlock your full community experience!

About SDorsey