This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About vij
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About vij
03-17-2023
5Posts
0Likes
0Solutions
Mar 17, 2023Last Visited
User
Activity
User
Profile
Latest posts by vij
| Subject | Views | Posted |
|---|---|---|
| 442 | 12-22-2022 02:18 PM | |
| 463 | 12-22-2022 01:27 PM | |
| 519 | 12-21-2022 03:45 PM | |
| 543 | 12-21-2022 03:24 PM | |
| 635 | 12-19-2022 11:05 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 12-15-2022 07:51 PM |
| Date Last Visited | 03-17-2023 04:33 PM |
| Posts | 5 |
12-22-2022
02:18 PM
We've noticed errors in the Monitoring logs of our Windows servers running the PAN Agent ID software.
The User ID is working fine but the error is continually filling the logs. (error screenshot attached)
PAN o/s 10.1.6 h3 and the Agent ID version is 10.1.1-102.
useridd.log
==========
2022-12-21 08:38:10.822 +0000 Error: pan_ssl_conn_open(pan_ssl_utils.c:755): pan_tcp_sock_open() to 10.64.58.202 port 5009 failed; errno=115
2022-12-21 08:38:10.822 +0000 2022-12-21 08:38:10.822 +0000 Error: pan_ssl_conn_open(pan_ssl_utils.c:755): pan_tcp_sock_open() to 10.64.58.169 port 5009 failed; errno=115 Error: pan_ssl_conn_open(pan_ssl_utils.c:755): pan_tcp_sock_open() to 10.64.58.204 port 5009 failed; errno=115
2022-12-21 08:38:16.463 +0000 Warning: pan_hip_report_file_modify_cert(pan_hip_handler.c:3030): cannot find
2022-12-21 08:38:16.464 +0000 Warning: pan_hip_report_init_xml(pan_hip_report.c:311): can't get os_vendor from report 'L-PF3KYHJ5'
2022-12-21 08:38:16.464 +0000 pan_hip_obj_evaluate_list(pan_hip_obj.c:2472): b_collect_apps: 0
2022-12-21 08:38:19.210 +0000 Error: pan_ssl_conn_open(pan_ssl_utils.c:755): pan_tcp_sock_open() to 10.64.58.153 port 5009 failed; errno=115
2022-12-21 08:38:20.346 +0000 Error: pan_ssl_conn_open(pan_ssl_utils.c:755): pan_tcp_sock_open() to 10.64.58.201 port 5009 failed; errno=115
2022-12-21 08:38:20.346 +0000 Error: pan_ssl_conn_open(pan_ssl_utils.c:755): pan_tcp_sock_open() to 10.64.58.203 port 5009 failed; errno=115
2022-12-21 08:38:27.130 +0000 2022-12-21 08:38:27.130 +0000 Error: pan_ssl_conn_open(pan_ssl_utils.c:755): Error: pan_ssl_conn_open(pan_ssl_utils.c:755): pan_tcp_sock_open() to 10.64.58.202 port 5009 failed; errno=115 pan_tcp_sock_open() to 10.64.58.169 port 5009 failed; errno=115
next action plan:
Awaiting user windows server version.
... View more
12-22-2022
01:27 PM
I will try & let me know.
... View more
12-21-2022
03:45 PM
PA-VM Series 8, vm-mode: Microsoft Azure
sw-version: 10.1.6-h6 global-protect-client-package-version: 5.2.1
Issue:
when trying to access websites, we are getting a lot of errors saying that the ROOT CA authority is untrusted/invalid
Error details: Received fatal alert CertificateUnknown from the client. CA Issuer URL (truncated):http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA
Certificate Information,
CA- Trusted Root CA
status Valid
... View more
12-21-2022
03:24 PM
Another errors also found
(P5500-T14648)Debug( 166): 11/29/22 09:53:19:599 Trying to do ipsec connection to 4.53.26.80[4501] (P5500-T14648)Debug( 487): 11/29/22 09:53:19:599 socket send buffer old size is 65536 (P5500-T14648)Debug( 511): 11/29/22 09:53:19:599 socket send buffer new size is 3145728 (P5500-T14648)Debug( 564): 11/29/22 09:53:19:606 Network is reachable (P5500-T14648)Info ( 178): 11/29/22 09:53:19:606 Connected to: 4.53.26.80[4501], Sending keep alive to ipsec socket... (P5500-T14648)Info ( 221): 11/29/22 09:53:25:617 failed to receive keep alive (P5500-T14648)Debug( 229): 11/29/22 09:53:25:617 IPSec anti-replay statistics: outside window count 0, replay count 0 (P5500-T14648)Debug( 231): 11/29/22 09:53:25:617 Disconnect udp socket (P5500-T14648)Info ( 364): 11/29/22 09:53:25:617 Connecting to 4.53.26.80 failed (P5500-T14648)Debug( 768): 11/29/22 09:53:25:617 Retry connect failed second time (P5500-T14648)Debug( 921): 11/29/22 09:53:25:617 Tunnel retry done: failed retry (P5500-T14648)Info ( 936): 11/29/22 09:53:25:617 Before ProcMonitor quit, disconnect vpn (P5500-T14648)Debug(11009): 11/29/22 09:53:25:617 m_preUsername jweaver (P5500-T14648)Debug(1441): 11/29/22 09:53:25:617 m_msp->IsVPNConnected() is 0, CControlManager::GetInstance()->IsInRetry() is 0 (P5500-T14648)Debug(7068): 11/29/22 09:53:25:617 --Set state to Disconnecting... (P5500-T14648)Info (2681): 11/29/22 09:53:25:617 Disconnect(VPN timeout) called (P5500-T8488)Debug(4533): 11/29/22 09:53:25:617 LifeTimeThread receives m_hExitLifeTimeThreadEvent (P5500-T8488)Debug(4561): 11/29/22 09:53:25:617 LifeTimeThread quits (P5500-T14648)Debug( 822): 11/29/22 09:53:25:617 vpn disconnect
Reference case in Jira
PAN-181116
... View more
12-19-2022
11:05 AM
From PanGPS Logs following logs.
looking for network issues or DNS issues. kindly suggest further troubleshooting to resolve the issue.
(P5544-T4240)Debug(5173): 12/09/22 11:44:34:124 Found virtual IP route entry (P5544-T4240)Debug(5936): 12/09/22 11:44:34:124 No change for gateway route (P5544-T4240)Debug(6696): 12/09/22 11:44:34:124 NetworkConnectionMonitorThread: Detected route change, but skip network discovery. (P5544-T4240)Debug(5048): 12/09/22 11:44:34:125 Wait for virtual interface IP route entry 10.11.160.66 (P5544-T4240)Debug(5062): 12/09/22 11:44:34:126 Found virtual interface IP route entry. (P5544-T4240)Debug(4878): 12/09/22 11:44:34:126 des=10.1.0.0, mask=255.255.0.0, nextHop=10.11.160.66, ifidx=3, forwardType=3, forwardProto=3, age=0, nextHopAs=0, matrix=1,0,0,0,0 (P5544-T4240)Debug(2220): 12/09/22 11:44:34:126 number of route is 64 (P5544-T4240)Debug(2238): 12/09/22 11:44:34:134 Set route successfully. ForwardDest = 10.1.0.0, metric 1. (P5544-T4240)Debug(2238): 12/09/22 11:44:34:248 Set route successfully. ForwardDest = 104.16.51.111, metric 1. (P5544-T4240)Debug(2238): 12/09/22 11:44:34:344 Set route successfully. ForwardDest = 18.246.31.138, metric 1. (P5544-T4240)Debug(2238): 12/09/22 11:44:34:440 Set route successfully. ForwardDest = 52.86.98.138, metric 1. (P5544-T4240)Debug(6600): 12/09/22 11:44:40:093 NetworkConnectionMonitorThread: route change detected. Wait for 3 seconds. (P5544-T4240)Debug(5173): 12/09/22 11:44:40:094 Found virtual IP route entry (P5544-T4240)Debug(5936): 12/09/22 11:44:40:094 No change for gateway route (P5544-T10840)Debug( 917): 12/09/22 11:44:40:231 HandleDnsCallback: failed to parse dns req packet. (P5544-T10840)Debug( 917): 12/09/22 11:44:40:262 HandleDnsCallback: failed to parse dns req packet. (P5544-T4240)Debug(6661): 12/09/22 11:44:43:114 NetworkConnectionMonitorThread: m_state = 0, m_bOnDemand=1, m_bAgentEnabled=1, m_bJustResumed is 0, m_bHibernate is 0, m_bAgentEnabled is 1, m_bDisconnect is 0, IsConnected() is 1, IsVPNInRetry() is 0. (P5544-T4240)Debug(5173): 12/09/22 11:44:43:116 Found virtual IP route entry (P5544-T4240)Debug(5936): 12/09/22 11:44:43:116 No change for gateway route (P5544-T4240)Debug(6696): 12/09/22 11:44:43:116 NetworkConnectionMonitorThread: Detected route change, but skip network discovery. (P5544-T4240)Debug(5048): 12/09/22 11:44:43:117 Wait for virtual interface IP route entry 10.11.160.66 (P5544-T4240)Debug(5062): 12/09/22 11:44:43:117 Found virtual interface IP route entry. (P5544-T4240)Debug(4878): 12/09/22 11:44:43:117 des=10.1.0.0, mask=255.255.0.0, nextHop=10.11.160.66, ifidx=3, forwardType=3, forwardProto=3, age=0, nextHopAs=0, matrix=1,0,0,0,0 (P5544-T4240)Debug(2220): 12/09/22 11:44:43:117 number of route is 64 (P5544-T4240)Debug(2238): 12/09/22 11:44:43:127 Set route successfully. ForwardDest = 10.1.0.0, metric 1. (P5544-T4240)Debug(2238): 12/09/22 11:44:43:230 Set route successfully. ForwardDest = 104.16.51.111, metric 1. (P5544-T4240)Debug(2238): 12/09/22 11:44:43:326 Set route successfully. ForwardDest = 18.246.31.138, metric 1. (P5544-T4240)Debug(2238): 12/09/22 11:44:43:430 Set route successfully. ForwardDest = 52.86.98.138, metric 1. (P5544-T10840)Debug( 917): 12/09/22 11:44:53:449 HandleDnsCallback: failed to parse dns req packet. (P5544-T10840)Debug( 917): 12/09/22 11:44:53:777 HandleDnsCallback: failed to parse dns req packet.
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks