About iamwu

From the Article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004ODICA2&lang=en_US%E2%80%A9 Symptom After upgrading PAN-OS to 9.1.13 or 10.0.10, unexpected traffic failure may occurs and traffic log shows the session end reason "resources-unavailable". Environment All platforms including VM firewalls Firewalls running on PAN-OS 9.1.13 or 10.0.10 (not affected to other PAN-OS versions) Cause If you can see the session end reason "resources-unavailable" under traffic log without resource usage spike after upgrading PAN-OS to affected versions, please check whether the counter "aho_alloc_lookup_failed" is increasing or not. > show counter global name aho_alloc_lookup_failed Name:           aho_alloc_lookup_failed Value:          184328 <<<<<<---------------!!!!!! Severity:       Warning Category:       aho Aspect:         resource Description:    failed to alloc regex lookup If you can see the above counter is increasing, please also check whether the "Regex Results" is depleted. > debug dataplane pool statistics | match "Regex Results" [12] Regex Results (13272): 15/8192 0x8000000109219180 If your firewall matches to the above symptoms, the issue might be hitting to PAN-189468. Please open a new support case via CSP with uploading tech-support file, if you need our assistance for checking the condition. Resolution This issue was fixed in PAN-OS 9.1.14 and 10.0.10-h1. Please upgrade PAN-OS if you are using affected versions (PAN-189468 only affects on 9.1.13 or 10.0.10). To release "Regex Result" memory pool on affected PAN-OS, you have to reboot the firewall. ... View more

The Disable VPN reason log has moved from the " Monitor tab > Logs > system" to the "Monitor tab > Logs > GlobalProtect" log. ================= Event:: gateway-agent-msg ================= ... View more