Panorama OTP verification failed due to the error "Generic communication error occured. Please enable debugging for detailed info [get-panorama-cert.py:262] <class 'TypeError'> ("'error' object is not iterable",)"
419
Created On 05/12/25 07:46 AM - Last Modified 11/07/25 20:58 PM
Symptom
Panorama OTP verification failed due to the following error.
admin@Panorama> request plugins cloud_services panorama-certificate fetch debug yes otp <OTP>
Generic communication error occured. Please enable debugging for detailed info [get-panorama-cert.py:262] <class 'TypeError'> ("'error' object is not iterable",)
=========== DEBUG BEGINS ===========
=========== DEBUG ENDS ===========
Failure
Environment
- Panorama Managed Prisma Access
- Panorama
- Cloud Services Plugin
Cause
This issue can be caused by several reasons, including:
- Required ports and FQDNs are not allowed by security appliances on the path between Panorama and Prisma Access.
- PMTUD is not working correctly on Panorama due to the following factors.
- Customer environment uses Palo Alto Networks firewalls as security appliances with SYN cookies enabled in Flood Protection.
- ICMP fragmentation needed message not to reach the management interface because permitted IP list is configured on management interface of Panorama.
Resolution
- Allow required ports and FQDNs in security appliances.
- Disable SYN cookies on the firewall
- Add the IP of the intermediate devices that sent ICMP Fragmentation needed message to permitted IP list.