HA pair member in suspended state for too long-paloaltonetworks-panos
Indeni tracks the duration of a device been put into suspended state
To make the suspended device available for the High Availability pair again, issue the following CLI command:\n
How does this work?
This script logs into the Palo Alto Networks firewall through API and retrieves the status of the HA. If status is “suspended”, then it will show how long it has been in that state. Otherwise, it will print 0.
Why is this important?
PAN devices can get stuck in suspended mode administratively and need to be manually re-enabled for HA. Customers should be alerted if they stay in this state for too long.
Without Indeni how would you find this?
The status of high availability is visible in the web interface as a widget on the main screen. However the duration of this suspended state is not reported to the user.
Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/parsers/src/panw/panos/show-high-availability-state-duration/show-high-availability-state-duration.ind.yaml
Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/rules/templatebased/paloaltonetworks/PanosHaSuspendedStateDurationRule.scala