https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-unable-to-change-hardware-udp-session/ta-p/548410 <P><SPAN>This Nominated Discussion Article is based on the post "</SPAN><STRONG><A href="https://live.paloaltonetworks.com/t5/general-topics/unable-to-change-hardware-udp-session-offloading-setting-as/m-p/532432" target="_blank" rel="noopener">Unable to change hardware udp session offloading setting as false</A></STRONG><SPAN>" by&nbsp;<STRONG><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/208779">@JoHyeonJae</a></STRONG>&nbsp;</SPAN><SPAN>&nbsp;and responded to by</SPAN><SPAN>&nbsp;</SPAN><A href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/77347" target="_blank" rel="noopener"><STRONG>@TomYoung</STRONG></A><SPAN>. Read on to see the discussion and solution</SPAN></P> <P>&nbsp;</P> <DIV class="lia-message-template-content-zone"> <BLOCKQUOTE> <P>I am using PA-440 on the PAN-OS 10.2.3-h4.<BR /><BR /></P> <P>Due to performance degradation issues, hardware session offloading and hardware udp session offloading was changed to false through the following commands.<BR /><BR /></P> <PRE class="ckeditor_codeblock"><SPAN>&gt; configure # set deviceconfig setting session offload no # commit</SPAN></PRE> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2023-02-28 at 5.36.56 PM.png" style="width: 596px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/48222iAC4CCF13E50575CE/image-dimensions/596x280/is-moderation-mode/true?v=v2" width="596" height="280" role="button" title="Screenshot 2023-02-28 at 5.36.56 PM.png" alt="Screenshot 2023-02-28 at 5.36.56 PM.png" /></span></P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2023-02-28 at 5.37.22 PM.png" style="width: 596px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/48223iAD7034B2955E60A9/image-dimensions/596x82/is-moderation-mode/true?v=v2" width="596" height="82" role="button" title="Screenshot 2023-02-28 at 5.37.22 PM.png" alt="Screenshot 2023-02-28 at 5.37.22 PM.png" /></span></P> <P>&nbsp;</P> <P>However, hardware session offloading has changed normally, but hardware udp session offloading has an issue that does not change.</P> <P>&nbsp;</P> <P>Moreover, the system display that 'set session udp-offload no' is an invalid command.<BR /><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2023-03-02 at 9.30.50 AM.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/48307i1F6E74A5B61B41FB/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="Screenshot 2023-03-02 at 9.30.50 AM.png" alt="Screenshot 2023-03-02 at 9.30.50 AM.png" /></span></P> </BLOCKQUOTE> <P>&nbsp;</P> <P>These documents say that offloading is only supported on the PA-3200, PA-5200, and PA-7000 Series.&nbsp; <A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm8cCAC" target="_blank" rel="nofollow noopener noreferrer">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm8cCAC</A>&nbsp; So does this one.&nbsp; <A href="https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/monitoring/take-packet-captures/disable-hardware-offload" target="_blank" rel="nofollow noopener noreferrer">https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/monitoring/take-packet-captures/disable-hardware-offload</A></P> <P>&nbsp;</P> <P>The 1st URL mentions an FPGA that is used for it. This link -&gt; <A href="https://www.paloaltonetworks.com/resources/pa-series-next-generation-firewalls-hardware-architectures" target="_blank" rel="nofollow noopener noreferrer">https://www.paloaltonetworks.com/resources/pa-series-next-generation-firewalls-hardware-architectures</A> show FPGAs for the 3 Series above and the PA-5400 Series, but not the PA-400.</P> <P>&nbsp;</P> <P>So, it has never been a feature on the lower end models, and the PA-400 Series does not have FPGAs. I could be wrong but the evidence suggests the PA-400 does not support this feature which is why you're getting the "Invalid Syntax" error.</P> <P>&nbsp;</P> </DIV> Thu, 06 Jul 2023 21:52:57 GMT kiwi 2023-07-06T21:52:57Z https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-unable-to-change-hardware-udp-session/ta-p/548410 <P><SPAN>This Nominated Discussion Article is based on the post "</SPAN><STRONG><A href="https://live.paloaltonetworks.com/t5/general-topics/unable-to-change-hardware-udp-session-offloading-setting-as/m-p/532432" target="_blank" rel="noopener">Unable to change hardware udp session offloading setting as false</A></STRONG><SPAN>".</SPAN></P> Thu, 06 Jul 2023 21:52:57 GMT https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-unable-to-change-hardware-udp-session/ta-p/548410 kiwi 2023-07-06T21:52:57Z https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-unable-to-change-hardware-udp-session/tac-p/550891#M650 <P>Hello</P><P><SPAN>Hardware UDP session offloading is not supported on the PA-440 model. The feature is available on specific models only. The "Invalid Syntax" error indicates it's not available on PA-400 Series.&nbsp;</SPAN></P> Tue, 25 Jul 2023 10:08:43 GMT https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-unable-to-change-hardware-udp-session/tac-p/550891#M650 stevediaz 2023-07-25T10:08:43Z