topic Re: 10.2.8 DP DP Hardware Packet Buffer exhaustion bug in Next-Generation Firewall Discussions

10.2.8 DP DP Hardware Packet Buffer exhaustion bug

PatrickG — Tue, 09 Apr 2024 20:27:03 GMT

If upgrading to 10.2.8, keep an eye out on your DP Hardware Packet Buffer usage. We've seen it cause PA-5250's to stop processing traffic.

TAC is aware of the issue. We ended up downgrading to 10.2.7-h3 to work around the issue for now (be mindful of the GP issues with that particular release).

Re: 10.2.8 DP DP Hardware Packet Buffer exhaustion bug

kiwi — Tue, 16 Apr 2024 11:51:40 GMT

Hi @PatrickG ,

Would you mind sharing the bug-ID for reference ?

Kind regards,

Kim.

Re: 10.2.8 DP DP Hardware Packet Buffer exhaustion bug

Marposs_IT — Fri, 26 Apr 2024 08:12:45 GMT

We're experiencing the same issue with PA-3250. This happened after upgrading from 10.2.6 to 11.1.2-h3.

Waiting for an official PAN statement we downgraded to version 10.2.7-h8 (it includes the GP patch for CVE-2024-3400).