We have a HA pair of PA-440 firewalls running PAN-OS 11.1.6-h3 in FIPS-CC mode. Recently, the active firewall stopped allowing logins via GUI, SSH, or Global Protect using local accounts—it just times out. The standby firewall works fine.
After power cycling the primary firewall, access was restored but only for a few days before the issue returned. Notably, the management plane CPU runs at 60-80%, potentially indicating a runaway process.
Has anyone experienced this issue? Are there known fixes—perhaps disabling certain features or rolling back the OS version? Any insights would be greatly appreciated.
