How to delete LSVPN cookie from satellite device?
2553
Created On 08/01/23 19:13 PM - Last Modified 06/23/25 21:09 PM
Objective
How to delete LSVPN cookie from satellite device?
Environment
- Palo Alto Firewalls
- Supported PAN-OS versions
- LSVPN
- Satellites
Procedure
When the Satellite Firewall presents a wrong cookie when authenticating to the portal, the following steps can be used to clear the cookie and authenticate successfully to the portal.
- On active satellite firewall, Disable IPSec tunnel and commit.
- On portal firewall, delete the satellite serial number (On HA device, delete both serial number of satellites).
- delete sslmgr-store satellite-info portal serialno <Serial Number1> name <PORTAL> state assigned
- delete sslmgr-store satellite-info portal serialno <Serial Number2> name <PORTAL> state assigned
- Re-enable satellite IPSec tunnel and commit.
- Retry the Portal authentication by entering username/password and it should work fine.