topic Intermittent inet connectivity after updating to 10.2.8-h3 in Next-Generation Firewall Discussions

Intermittent inet connectivity after updating to 10.2.8-h3

RichMauger — Thu, 18 Apr 2024 16:13:17 GMT

We're currently running on 10.2.3-h9 (PA-440's in HA pair Active/Passive) with remediation steps put in place for CVE-2024-3400 and Telemetry disabled.

We attempted to migrate to 10.2.8-h3 as it is listed as a preferred release and fix for the CVE as listed by PA. The update process went as expected and everything appeared to be completely functional. After approximately 20-25 minutes of run time, we started experiencing intermittent internet connectivity. Some users were fine, others were not despite being on the same subnet space. After troubleshooting for a while with no identifiable cause, it was decided to move to 10.2.9-h1 and try again. Same results. Sporadic, intermittent internet access.

We then rolled back to 10.2.3-h9 and no more issues. Has anyone seen this issue on either of those OS releases?

Re: Intermittent inet connectivity after updating to 10.2.8-h3

EduRamirez — Fri, 10 May 2024 15:48:12 GMT

I can see that Palo Alto put 10.2.8-h3 as preferred, but I have seen several problems with this version. If your PA is an 800 series you should be fine with 10.2.7-h8.

If you already installed a more stable version that worked for you I would like to know what it is. Thanks

Re: Intermittent inet connectivity after updating to 10.2.8-h3

zahmed01 — Tue, 14 May 2024 14:54:14 GMT

Hello,

When you had experienced intermittent issues on the two previous versions (10.2.8-h3 and 10.2.9-h1) did you get a chance to open a support case in order to have TAC troubleshoot to see if they could find an underlying cause for the intermittent connectivity issues?

Re: Intermittent inet connectivity after updating to 10.2.8-h3

EduRamirez — Fri, 24 May 2024 01:07:00 GMT

Hello, here are all the fixed issues:

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-8-known-and-addressed-issues/pan-os-10-2-8-addressed-issues