asg diag verify : Software Provision and Performance hogs failed

todd — Thu, 26 May 2022 08:34:47 GMT

Hi Expert,

We are setting new Maestro with 140 * 2 and SG6600*3. When we performed "asg diag verify" command, there are always two failed item.

One is Software Provision and the other is Performance hogs failed. Will this two failed item affect Maestro running and performance ?

We are running R81.10 JHF take 30.

Summary
=======
1. Software verifier passed successfully.
2. Module verifier passed successfully.
3. Hotfix verifier failed.

==============================
Performance hogs:
==============================

Found the following issues:
-----------------------------------------------------------------
[ All] Accept Templates : disabled by Firewall; Layer Network disables template offloads from rule #697; Throughput acceleration still enabled.
[ All] NAT Templates: disabled by Firewall; Layer Network disables template offloads from rule #697; Throughput acceleration still enabled.

Thanks!

Todd

Re: asg diag verify : Software Provision and Performance hogs failed

_Val_ — Thu, 26 May 2022 09:04:48 GMT

@Anatoly can you please assist here?

Re: asg diag verify : Software Provision and Performance hogs failed

todd — Sat, 28 May 2022 08:08:44 GMT

We found the performance hogs was caused by one rule with NFS service group object.

Removing some RPC NFS related objects from the rule service and re-run diag verify. All performance hogs test are PASSED. 🙂

We also created a TAC for Software Provision failed which is currently under investigation.

Re: asg diag verify : Software Provision and Performance hogs failed

Martijn — Mon, 13 Mar 2023 14:02:36 GMT

Hi,

Did you even got a solution for the Software Provision failure from TAC.

I am facing the same issue on a Maestro setup. All is working fine and both SGM where upgraded with the same procedure.
But on one SGM the following software is missing (Not Exists)

BUNDLE_ESOD_CSHELL_AUTOUPDATE
Hotfix_ESOD_CSHELL_AUTOUPDATE

Like to know if I can solve this without much effort.

Regards,
Martijn

Re: asg diag verify : Software Provision and Performance hogs failed

todd — Tue, 14 Mar 2023 06:54:19 GMT

We opened a TAC ticket about this Software Provision failure on 2022/06.

TAC said this is about autoupdater, when autoupdater is running, all these 'failed' will be fixed automatically.

Since our environment does not allow connections to the Internet, we ignore these Software Provision failure.

Todd

Re: asg diag verify : Software Provision and Performance hogs failed

Lari_Luoma — Thu, 16 Mar 2023 04:12:17 GMT

Hi!

Don't worry about auto-updater. It's a tool that updates itself automatically and asynchronously and that's why different SGMs can have a different revisions of it. asg_provision, which is part of asg diag as well is not the best tool because it gives this kind of false positives. Better tool to verify that your software is good is hcp -r "software version" -m all.
As you already found out performance_hogs failure is related to policy.

topic Re: asg diag verify : Software Provision and Performance hogs failed in Hyperscale Firewall (Maestro)

asg diag verify : Software Provision and Performance hogs failed

Re: asg diag verify : Software Provision and Performance hogs failed

Re: asg diag verify : Software Provision and Performance hogs failed

Re: asg diag verify : Software Provision and Performance hogs failed

Re: asg diag verify : Software Provision and Performance hogs failed

Re: asg diag verify : Software Provision and Performance hogs failed