This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Brett.Hoshaw
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Brett.Hoshaw
07-28-2023
36Posts
4Likes
1Solution
Jul 28, 2023Last Visited
User
Activity
User
Profile
Latest posts by Brett.Hoshaw
| Subject | Views | Posted |
|---|---|---|
| 779 | 02-09-2023 01:33 PM | |
| 1652 | 02-03-2023 12:12 PM | |
| 8952 | 09-30-2022 09:56 AM | |
| 10312 | 04-25-2022 12:18 PM | |
| 3420 | 02-05-2021 07:06 AM | |
| 18418 | 10-16-2020 01:37 PM | |
| 18593 | 09-25-2020 10:01 AM | |
| 18714 | 09-17-2020 06:54 AM | |
| 20528 | 09-16-2020 12:37 PM | |
| 20549 | 09-16-2020 10:16 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 4 Likes | 10-16-2020 01:37 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 3 Likes | |||
| 1 Like | |||
| 2 Likes | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 03-07-2019 08:29 AM |
| Date Last Visited | 07-28-2023 10:19 AM |
| Posts | 36 |
| Total Likes Received | 4 |
02-09-2023
01:33 PM
If you're using Zscaler Client Connector, we have seen that application modify the injected routes and point them to the wrong next-hop interface. Disabling ZCC fixes the issue. It takes anywhere from 1 second to 2 hours after enabling ZCC before the routes get trashed.
... View more
02-03-2023
12:12 PM
Same exact results here, but client version doesn't seem to matter. Our issue seems to be related to a move away from DUO to Microsoft MFA.
... View more
09-30-2022
09:56 AM
Just wanted to comment, that if you are trying to retrieve device configuration/panorama connected devices and you are logged in as "Admin" it may not work and there's no warning window or anything to let you know there's an issue. I was able to find this log via CLI:
{"success":false,"message":"Type [op] not authorized for user role."}
Which is when I decide to logout of "Admin" and login as an actual admin/superuser account where the operation was successful. This log doesn't exist in the GUI as far as I could tell.
... View more
04-25-2022
12:18 PM
My rep told me that this only applies to those using ADEM.
... View more
02-05-2021
07:06 AM
Got hit with this on Wednesday 2/3. It sounds like this cleared up as of this morning 2/5 for us.
... View more
10-16-2020
01:37 PM
4 Kudos
Finally got someone from TAC to run the "es_restart.py" script. This does require TAC to login as root. Logs came back almost instantly. This issue was likely caused by a power outage, the result of which was corrupted index files for ES. Reinstalling PANOS-9.0.9 didn't fix it, but it was certainly worth a shot! Thanks!
... View more
09-25-2020
10:01 AM
Long delay, but I finally got around to reinstalling 9.0.9 on Panorama today. Unfortunately, it didn't fix the missing logs. I still notice that the elasticsearch process is still restarting every second (new pid every second & caught the same exit error). Support is still slacking, so I'll try making a point of it again.
... View more
09-17-2020
06:54 AM
We're on 9.0.9 & 9.0.9-h1. Guess I'll see if we can skip the chit chat and get this thing reset.
... View more
09-16-2020
12:37 PM
Gonna keep going here...I noticed that the "java" process is exceptionally high (90% - 420%). Turns out, JAVA is used to do reporting & logging/indices. Funny enough, those are the exact things I cannot get Panorama to do. Panorama - JAVA Process To further my hunch about elasticsearch - it is 100% restarting constantly. Running "show system software status | match elasticsearch" back-to-back 10 times in a row confirms it, I saw at least once where the service was "restarting (pid: -1) - Exit Code: 1". Since elasticsearch is written in JAVA, I can only assume that fixing this service will fix a lot of my other issues.
... View more
09-16-2020
10:16 AM
I've restarted this management server probably 10 times. The only thing it seems to do is restart services freeing up the CPU long enough to seem stable, but then it ramps back up. Still no logs either. Restarted Panorama. Restarted management server. Restarted log collector. Gracefully Rebooted the VM Gracefully Shutdown the VM. None of which seem to help. My hunch is the elasticsearch service is bugged out, eventually causing the CPU to spike, eventually causing the whole system to become unstable. Nothing seems to bring logs back to the UX either.
... View more
09-16-2020
10:13 AM
I'm actually pretty convinced this is related to the elastic search process. After a graceful shutdown/power up of the Panorama VM I noticed the following: show system software status
...
Process elasticsearch restarting (pid: -1) - Exit Code: 1
... Every time you run this command, this process comes back with a new PID (which leads me to believe it's constantly restarting). Each of these are within 10-15 seconds of each other: show system software status
...
Process elasticsearch running (pid: 27029)
... show system software status
...
Process elasticsearch running (pid: 27157)
... show system software status
...
Process elasticsearch running (pid: 27658)
... show system software status
...
Process elasticsearch running (pid: 27399)
...
... View more
09-16-2020
08:48 AM
As the title says, Panorama receives logs just fine but will not show them in the GUI. I noticed this today. Disks shows unavailable in panorama but in the CLI they're fine.
... View more
09-08-2020
02:35 PM
Netstat shows that only 80 ports were in use (out of 16,000+ total - checked that via the CLI to make sure it wasn't something small). Windows builds are 9309 all around 1909 18369.959 The only common denominator seems to be GlobalProtect. I saw a new error today which resulted in a disconnect with the same symptoms: Bio Enum Databases failed. hr = 0x0 What still intrigues me is the fact that it seems like affected machines just seem to lose DNS. Public hops works, everything seems to be functioning except no browsing (DNS related). All signs point away from GPC, but none of our non-vpn users are having this issue and they remotely connect in different ways.
... View more
09-04-2020
10:18 AM
Anyone else seeing a lot of this lately? I've been researching this over and over again for about 2 weeks and all signs point to Windows being the culrpit, but the only time we ever see this happen is when users are connect to GlobalProtect. Here's the culprit log from GPS: connect failed with error 10055(An operation on a socket could not be performed because the system lacked sufficient buffer space or because a queue was full.) Things I can verify: Reboot fixes (winsock reset also fixes it, but requires a reboot anyways) Sometimes 2 Users don't lose active sessions Users can no longer browse anything via DNS New connections can be made via telnet Internet access is still available (ping and traceroute show that affected devices are traversing public hops and can reach them) Local network is also affected Port exhaustion has not actually occurred One user had 80 of 16,000+ ports in use (clearly not exhausted)
... View more
04-05-2019
12:38 PM
Yeap, that's what I was afraid of. Trying to kill two birds with one stone but it doesn't look like it's possible. Thanks!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
07-28-2023
10:19 AM
|
Likes Given To
| User | Likes Count |
|---|---|
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 2 |
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks