'Apps Seen' is not getting updated under security rules in Panorama

'Apps Seen' is not getting updated under security rules in Panorama

146
Created On 06/03/26 06:11 AM - Last Modified 06/03/26 06:13 AM


Symptom


  • Apps Seen Count not increasing in the Panorama policies. 
  • On Firewalls connected to the Panorama, the Last App Seen timestamp is showing correctly, indicating that the information has not been updated in a timely on the firewalls.
  • For the Policy rules, we can see the logs incoming on to panorama under Monitor tab


Environment


  • Panorama upgraded to 11.2.9 


Cause


  • Due to PAN-312870, where in the update variable is going negative 
  • This can be verified by putting the configd process on panroama in debug and checking for below logs:

     
    var/log/pan/configd.log.old:69801:2026-02-11 02:05:10.183 +1100 !!! MS-DB: DB updates done (0 left)
    var/log/pan/configd.log.old:69802:2026-02-11 02:05:11.101 +1100 !!! MS-DB: DB updates done (-1 left) 


Resolution


  • Upgrade the PAN-OS of the Panorama to either of below and later releases of them.

    11.1.17
    12.1.8,
    13.1.0 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000wlHAKAY&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail