How to enable a full core dump on the Edge SWG (ProxySG) appliance
search cancel

How to enable a full core dump on the Edge SWG (ProxySG) appliance

book

Article ID: 168176

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

In order to obtain a full core dump for analysis when the Edge Secure Web Gateway (ProxySG) appliance restarts, you have to change the 'Core Images' settings to 'Full'. Or else, by default, the 'Full core' will not be written during the restart.
 

Resolution

You can do the following to change the Core Images settings to 'Full' either through Management Console or CLI:

In the old Legacy Management Console:

  1. Log in to the Management Console (https://<IP_address>:8082/ ).
  2. Select Maintenance  > Core Images > Core Images.
  3.  For the core image type, select Full.
  4. Click Apply to save your changes.

In the new Admin Console, the above option is not available so you will have to rely on the CLI option below.

In the CLI:

  1. Log in to the CLI via SSH or the serial console.
  2. Type the following commands:
>en
#conf t
#(config)restart core-image full
 
After you change the above settings:
 
A. Whenever the Proxy encounters an unexpected reboot/restart, it will write a Full Core automatically (you do not have to manually force the core, just collect the existing Core for analysis).
B. If there is a hang, or if there is a need to investigate the Proxy unexpected behavior or if Proxy is in a bad state, we may need to force a 'Full' core dump for further analysis.
  1. To force a core dump, you will have to restart the Edge SWG. Restarting the Edge SWG via GUI will not generate the core dump. You will to restart via CLI.
  2. Once you have logged into the CLI via SSH or serial console, use the following commands
#restart abrupt
 

IMPORTANT: When the full core dump is enabled, the appliance takes a longer time to reboot as it need time to generate/write the core dump. The duration of reboot depends on how much memory the unit has and how much of it was in use at the time of the restart. It might take 5 to 10 minutes to generate a full core dump depending on the size.

 

Also You can Validate from Sysinfo Provided by Customer, If "Full-Core" is Enabled or not, Look for Below Config in Sysinfo

!- BEGIN general
restart core-image full  <------- This indicates full core is Enabled, If you do not see that indicates full core is disabled.
restart mode hardware
!- END general