topic Re: Query about Session Offloading in Next-Generation Firewall Discussions

Query about Session Offloading

Edsnow — Wed, 26 Mar 2025 13:00:12 GMT

Hi Team,

How to check the Offloaded session in PAN-OS 10.1.11 ?

In the below image the session is offloaded ?

Re: Query about Session Offloading

ozheng — Fri, 28 Mar 2025 02:57:20 GMT

Hello @Edsnow ,

I would think it is.
But first thing : check if there is actually some hardware offload on your platform.

Olivier

Re: Query about Session Offloading

Edsnow — Thu, 08 May 2025 11:16:21 GMT

Hi @ozheng ,

Could you please help how to check is there any hardware offloading ?

Re: Query about Session Offloading

PavelK — Fri, 09 May 2025 02:37:55 GMT

Hello @Edsnow

below is the list of platforms supporting HW offload:

Reference: disable-hardware-offload.

You can confirm it from CLI:

show session info | match offloading

Reference: Disabling Session Offload to Record Traffic During Packet Capture.

There is a traffic log filter (offloaded eq 1) to confirm session offloading from logs (1 is offloaded, 0 is not offloaded), however at least in my case with PA-5260 it does not return any result even though I can confirm from CLI by looking into each session individually that it was offloaded. Reference: Traffic Log Fields.

Kind Regards

Pavel