How to Restart the Web-related Processes
109088
Created On 01/21/20 01:15 AM - Last Modified 05/11/20 21:52 PM
Objective
PAN-OS has multiple web-related processes and we can restart these processes by CLI in some cases(ex. WebGUI is sluggish or unresponsive, These processes are consuming excessive memory, Global Protect Portal/Gateway not working, etc..). This article shows how to restart these processes and how to confirm the restart.
Note: Typically restarting these processes are non-impacting. However, these are always encouraged to perform during non-peak hours or during a maintenance window. Refer Important Information prior running any debug commands.
Environment
- PAN-OS 8.1 and above.
- Palo Alto Firewall.
Procedure
1. Here are web-related processes.
> debug software restart process web-backend
> debug software restart process web-server
> debug software restart process sslvpn-web-server
We can see restart information to run 'debug software restart process ?' command as follow:
admin@PA> debug software restart process ?
<snip>
web-backend Management web server backend process
web-server Management web server process
sslvpn-web-server SSL VPN Web server process
2. Check process pid which you want to restart before restarting the process to enter the CLI command:
[debug software restart process web-backend]
admin@PA> show system software status | match web_backend
Process web_backend running (pid: 3689)
[debug software restart process web-server]
admin@PA> show system software status | match websrvr
Process websrvr running (pid: 3686)
[debug software restart process sslvpn-web-server]
admin@PA> show system software status | match sslvpn
Process sslvpn running (pid: 3699)
3. Restart process which you want to restart to enter the CLI command:
[debug software restart process web-backend]
admin@PA> debug software restart process web-backend
Process web_backend was restarted by user admin
[debug software restart process web-server]
admin@PA> debug software restart process web-server
Process websrvr was restarted by user admin
[debug software restart process sslvpn-web-server]
admin@PA> debug software restart process sslvpn-web-server
Process sslvpn was restarted by user admin
4. Check the process pid was changed to enter the CLI command:
[debug software restart process web-backend]
admin@PA> show system software status | match web_backend
Process web_backend running (pid: 15924)
[debug software restart process web-server]
admin@PA> show system software status | match websrvr
Process websrvr running (pid: 16083)
[debug software restart process sslvpn-web-server]
admin@PA> show system software status | match sslvpn
Process sslvpn running (pid: 16276)
5. You can also see the restarting behavior to check masterd.log as follow:
[debug software restart process web-backend]
admin@PA> tail mp-log masterd.log
2020-01-21 12:24:09.152 +0900 INFO: web_backend: received user restart
2020-01-21 12:24:09.152 +0900 INFO: web_backend: User restart reason - triggered by CLI
2020-01-21 12:24:09.152 +0900 INFO: web_backend: received user stop
2020-01-21 12:24:19.781 +0900 INFO: web_backend: exited, Core: False, Exit code: 0
2020-01-21 12:24:19.996 +0900 INFO: web_backend: process running with pid 15924
[debug software restart process web-server]
admin@PA> tail mp-log masterd.log
2020-01-21 12:25:43.737 +0900 INFO: websrvr: received user restart
2020-01-21 12:25:43.737 +0900 INFO: websrvr: User restart reason - triggered by CLI
2020-01-21 12:25:43.737 +0900 INFO: websrvr: received user stop
2020-01-21 12:25:43.749 +0900 INFO: websrvr: exited, Core: False, Exit code: 0
2020-01-21 12:25:43.862 +0900 INFO: websrvr: process running with pid 16083
[debug software restart process sslvpn-web-server]
admin@PA> tail mp-log masterd.log
2020-01-21 12:27:28.619 +0900 INFO: sslvpn: received user restart
2020-01-21 12:27:28.619 +0900 INFO: sslvpn: User restart reason - triggered by CLI
2020-01-21 12:27:28.619 +0900 INFO: sslvpn: received user stop
2020-01-21 12:27:28.749 +0900 INFO: sslvpn: exited, Core: False, Exit code: 0
2020-01-21 12:27:28.965 +0900 INFO: sslvpn: process running with pid 16276
Additional Information
You can also refer below how to restart Management server(mgmtsrvr) process.
How to Restart the Management server mgmtsrvr" Process - WebGUI"