为什么我会在 MOTD 和系统日志上收到 PAN-OS 证书过期警报,即使已按照建议采取了所有纠正措施?

为什么我会在 MOTD 和系统日志上收到 PAN-OS 证书过期警报,即使已按照建议采取了所有纠正措施?

9467
Created On 01/02/24 06:49 AM - Last Modified 02/02/24 05:44 AM


Question


为什么即使我已按照 公告采取了所有纠正措施,我仍会收到 PAN-OS 证书过期警报?
 
  • 登录到 PAN-OS GUI 后的 MODD:
6.png
 
  • CLI 上的系统日志:
Time                Severity Subtype Object EventID ID Description
===============================================================================
2024/01/01 06:32:21 critical dynamic        palo-al 0  Urgent Action required: PAN-OS Certificate Expiration on Dec 31 2023. For details, refer to the following Customer Advisory: https://live.paloaltonetworks.com/t5/customer-advisories/emergency-update-required-pan-os-root-and-default-certificate/ta-p/564672
2024/01/01 11:47:56 medium   dynamic        palo-al 0  Warning: PAN-OS Certificate expired on Dec 31, 2023. If you have already implemented the required steps please ignore this message. Otherwise please refer to the following Customer Advisory: https://live.paloaltonetworks.com/t5/customer-advisories/emergency-update-required-pan-os-root-and-default-certificate/ta-p/564672
 
  • 系统日志/电子邮件警报:

2.png

 
 


Environment


  • 所有 PAN-OS 防火墙
  • 全景


Answer


该消息将广播到所有设备,无论平台和 PAN-OS 版本如何。 如果已按照 公告采取所有纠正措施,则可以安全地忽略消息/警报,无需采取进一步措施。

这也通过另一个 MOTD 表示
5.png


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008WPICA2&lang=zh_CN&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language