Delay when Pushing Configuration from Panorama Due to Panorama Takes Longer Time to Generate Push Config
5098
Created On 04/16/24 01:05 AM - Last Modified 12/10/24 03:25 AM
Symptom
- Config push to the device takes longer from 10 minutes and up to 2 hours.
- On the commit and push, the delay is observed after commit on Panorama is completed until config is ready to be sent to device.
- On separate commit and push, when selecting push scope, it pops up the following message,
- Commit on Panorama is completed in reasonable time.
- Once the Commit All job is received, commit on the device is completed in reasonable time.
- On configd.log, when it is run on debug level, the following messages are observed,
debug: pan_mgmtop_commit_all_sp_job(pan_ops_cms.c:1985): DG-push: Waiting for DG file to be written for <DG name> Error: pan_mgmtop_commit_all_sp_job(pan_ops_cms.c:1993): Failed to get config file in 30 minutes. Giving up.
Environment
- Panorama Managed Firewalls
- Supported PAN-OS
- Commit
Cause
Software issue handling multiple simultaneous commit jobs.
Resolution
- The issue is resolved under PAN-235840.
- The issue is fixed in PAN OS 11.1.2, 11.0.4, 10.2.8, 10.2.7-h6, 10.2.5-h5, 10.1.14 and all later PAN-OS versions.
- Upgrading to the fixed codes will resolve the issue.
Additional Information
The workaround is to reduce the number of simultaneous commit or commit and push.