Delay when Pushing Configuration from Panorama Due to Panorama Takes Longer Time to Generate Push Config

Delay when Pushing Configuration from Panorama Due to Panorama Takes Longer Time to Generate Push Config

5100
Created On 04/16/24 01:05 AM - Last Modified 12/10/24 03:25 AM


Symptom


  • Config push to the device takes longer from 10 minutes and up to 2 hours.
  • On the commit and push, the delay is observed after commit on Panorama is completed until config is ready to be sent to device.
  • On separate commit and push, when selecting push scope, it pops up the following message,
image.png
  • Commit on Panorama is completed in reasonable time.
  • Once the Commit All job is received, commit on the device is completed in reasonable time.
  • On configd.log, when it is run on debug level, the following messages are observed,
    debug: pan_mgmtop_commit_all_sp_job(pan_ops_cms.c:1985): DG-push: Waiting for DG file to be written for <DG name>
    Error: pan_mgmtop_commit_all_sp_job(pan_ops_cms.c:1993): Failed to get config file in 30 minutes. Giving up.


Environment


  • Panorama Managed Firewalls
  • Supported PAN-OS
  • Commit


Cause


Software issue handling multiple simultaneous commit jobs.



Resolution


  1. The issue is resolved under PAN-235840.
  2. The issue is fixed in PAN OS 11.1.2, 11.0.4, 10.2.8, 10.2.7-h6, 10.2.5-h5, 10.1.14 and all later PAN-OS versions.
  3. Upgrading to the fixed codes will resolve the issue.


Additional Information


The workaround is to reduce the number of simultaneous commit or commit and push.

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CrMUCA0&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language