How to Restart the Web-related Processes

How to Restart the Web-related Processes

18529
Created On 01/21/20 01:15 AM - Last Modified 05/11/20 21:52 PM


Objective
PAN-OS has multiple web-related processes and we can restart these processes by CLI in some cases(ex. WebGUI is sluggish or unresponsive, These processes are consuming excessive memory, Global Protect Portal/Gateway not working, etc..). This article shows how to restart these processes and how to confirm the restart.

Note: Typically restarting these processes are non-impacting. However, these are always encouraged to perform during non-peak hours or during a maintenance window. Refer Important Information prior running any debug commands.


Environment
  • PAN-OS 8.1 and above.
  • Palo Alto Firewall.


Procedure
1. Here are web-related processes. 
 
> debug software restart process web-backend
> debug software restart process web-server
> debug software restart process sslvpn-web-server

We can see restart information to run 'debug software restart process ?' command as follow:
 
admin@PA> debug software restart process ?
<snip>
  web-backend         Management web server backend process
  web-server          Management web server process
  sslvpn-web-server   SSL VPN Web server process


2. Check process pid which you want to restart before restarting the process to enter the CLI command:

[debug software restart process web-backend]
admin@PA> show system software status | match web_backend
Process  web_backend          running  (pid: 3689)

[debug software restart process web-server]
admin@PA> show system software status | match websrvr
Process  websrvr              running  (pid: 3686)

[debug software restart process sslvpn-web-server]
admin@PA> show system software status | match sslvpn
Process  sslvpn               running  (pid: 3699)

3. Restart process which you want to restart to enter the CLI command:

[debug software restart process web-backend]
admin@PA> debug software restart process web-backend
Process web_backend was restarted by user admin

[debug software restart process web-server]
admin@PA> debug software restart process web-server
Process websrvr was restarted by user admin


[debug software restart process sslvpn-web-server]
admin@PA> debug software restart process sslvpn-web-server
Process sslvpn was restarted by user admin

4. Check the process pid was changed to enter the CLI command:

[debug software restart process web-backend]
admin@PA> show system software status | match web_backend
Process  web_backend          running  (pid: 15924)

[debug software restart process web-server]
admin@PA> show system software status | match websrvr
Process  websrvr              running  (pid: 16083)

[debug software restart process sslvpn-web-server]
admin@PA> show system software status | match sslvpn
Process  sslvpn               running  (pid: 16276)

5. You can also see the restarting behavior to check masterd.log as follow:

[debug software restart process web-backend]
admin@PA> tail mp-log masterd.log
2020-01-21 12:24:09.152 +0900 INFO: web_backend: received user restart
2020-01-21 12:24:09.152 +0900 INFO: web_backend: User restart reason - triggered by CLI
2020-01-21 12:24:09.152 +0900 INFO: web_backend: received user stop
2020-01-21 12:24:19.781 +0900 INFO: web_backend: exited, Core: False, Exit code: 0
2020-01-21 12:24:19.996 +0900 INFO: web_backend: process running with pid 15924

[debug software restart process web-server]
admin@PA> tail mp-log masterd.log
2020-01-21 12:25:43.737 +0900 INFO: websrvr: received user restart
2020-01-21 12:25:43.737 +0900 INFO: websrvr: User restart reason - triggered by CLI
2020-01-21 12:25:43.737 +0900 INFO: websrvr: received user stop
2020-01-21 12:25:43.749 +0900 INFO: websrvr: exited, Core: False, Exit code: 0
2020-01-21 12:25:43.862 +0900 INFO: websrvr: process running with pid 16083

[debug software restart process sslvpn-web-server]
admin@PA> tail mp-log masterd.log
2020-01-21 12:27:28.619 +0900 INFO: sslvpn: received user restart
2020-01-21 12:27:28.619 +0900 INFO: sslvpn: User restart reason - triggered by CLI
2020-01-21 12:27:28.619 +0900 INFO: sslvpn: received user stop
2020-01-21 12:27:28.749 +0900 INFO: sslvpn: exited, Core: False, Exit code: 0
2020-01-21 12:27:28.965 +0900 INFO: sslvpn: process running with pid 16276

 


Additional Information
You can also refer below how to restart Management server(mgmtsrvr) process. 
How to Restart the Management server mgmtsrvr" Process - WebGUI"


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POIHCA4&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments