https://live.paloaltonetworks.com/t5/next-generation-firewall/pan-os-12-1-2-features-operational-and-performance-impact-of/m-p/1266512#M7194 <P><SPAN>Attention: Global TPM team,</SPAN></P> <DIV><SPAN>Hello Team,</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>I would like to confirm the operational and performance impact of the following features introduced in PAN-OS 12.1.2:</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>1. Brotli-compressed content inspection using the Content-Based Threat Detection (CTD) engine</SPAN></DIV> <DIV><SPAN>2. Dedicated DNS Security log type for improved DNS visibility</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>Could you please advise on the following points for each feature?</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>1. Impact on existing traffic flows when enabled</SPAN></DIV> <DIV><SPAN>2. Expected impact on CPU, memory utilization, throughput, latency, or overall firewall performance</SPAN></DIV> <DIV><SPAN>3. Known operational considerations, including potential false positives or traffic blocking behavior</SPAN></DIV> <DIV><SPAN>4. Whether enabling the feature requires any changes to existing Security Policies, Security Profiles, Decryption settings, or other configurations</SPAN></DIV> <DIV><SPAN>5. Recommended validation steps before and after enablement</SPAN></DIV> <DIV><SPAN>6. Whether the feature can be safely disabled and reverted if issues are observed after enablement</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>Additionally, are there any documented best practices, limitations, caveats, or deployment considerations that should be reviewed before enabling these features?</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>Thank you.</SPAN></DIV> <P><LI-WRAPPER></LI-WRAPPER></P> <P>&nbsp;</P> Tue, 20 Oct 2026 06:12:11 GMT Nimbus 2026-10-20T06:12:11Z https://live.paloaltonetworks.com/t5/next-generation-firewall/pan-os-12-1-2-features-operational-and-performance-impact-of/m-p/1266512#M7194 <P><SPAN>Attention: Global TPM team,</SPAN></P> <DIV><SPAN>Hello Team,</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>I would like to confirm the operational and performance impact of the following features introduced in PAN-OS 12.1.2:</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>1. Brotli-compressed content inspection using the Content-Based Threat Detection (CTD) engine</SPAN></DIV> <DIV><SPAN>2. Dedicated DNS Security log type for improved DNS visibility</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>Could you please advise on the following points for each feature?</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>1. Impact on existing traffic flows when enabled</SPAN></DIV> <DIV><SPAN>2. Expected impact on CPU, memory utilization, throughput, latency, or overall firewall performance</SPAN></DIV> <DIV><SPAN>3. Known operational considerations, including potential false positives or traffic blocking behavior</SPAN></DIV> <DIV><SPAN>4. Whether enabling the feature requires any changes to existing Security Policies, Security Profiles, Decryption settings, or other configurations</SPAN></DIV> <DIV><SPAN>5. Recommended validation steps before and after enablement</SPAN></DIV> <DIV><SPAN>6. Whether the feature can be safely disabled and reverted if issues are observed after enablement</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>Additionally, are there any documented best practices, limitations, caveats, or deployment considerations that should be reviewed before enabling these features?</SPAN></DIV> <DIV>&nbsp;</DIV> <DIV><SPAN>Thank you.</SPAN></DIV> <P><LI-WRAPPER></LI-WRAPPER></P> <P>&nbsp;</P> Tue, 20 Oct 2026 06:12:11 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/pan-os-12-1-2-features-operational-and-performance-impact-of/m-p/1266512#M7194 Nimbus 2026-10-20T06:12:11Z https://live.paloaltonetworks.com/t5/next-generation-firewall/pan-os-12-1-2-features-operational-and-performance-impact-of/m-p/1266558#M7195 <P>Hello,</P> <P>Here are my thoughts:</P> <DIV><SPAN>1. Impact on existing traffic flows when enabled</SPAN></DIV> <UL> <LI><SPAN>There could be blocked traffic depending on policies etc.</SPAN></LI> </UL> <DIV><SPAN>2. Expected impact on CPU, memory utilization, throughput, latency, or overall firewall performance</SPAN></DIV> <UL> <LI><SPAN>There will be a hit depending on your model and traffic flowing through it.</SPAN></LI> </UL> <DIV><SPAN>3. Known operational considerations, including potential false positives or traffic blocking behavior</SPAN></DIV> <UL> <LI><SPAN>There could be some but I dont run into them often.</SPAN></LI> </UL> <DIV><SPAN>4. Whether enabling the feature requires any changes to existing Security Policies, Security Profiles, Decryption settings, or other configurations</SPAN></DIV> <UL> <LI><SPAN>Yes, you need to set your security policies to use the features.</SPAN></LI> </UL> <DIV><SPAN>5. Recommended validation steps before and after enablement</SPAN></DIV> <UL> <LI><SPAN>Go slow and take your time. Enable one and monitor (could be days or weeks depending on your traffic and appetite for potential blocks)</SPAN></LI> </UL> <DIV><SPAN>6. Whether the feature can be safely disabled and reverted if issues are observed after enablement</SPAN></DIV> <UL> <LI><SPAN>Absolutly, you nca revert the configuration to a previous one before you enabled this.</SPAN></LI> </UL> <DIV>&nbsp;</DIV> <DIV><SPAN>Additionally, are there any documented best practices, limitations, caveats, or deployment considerations that should be reviewed before enabling these features?</SPAN></DIV> <UL> <LI><SPAN>Go slow and take your time. enable logging at session end on all of your security policies so you can see the traffic wether it was allowed or blocked.</SPAN></LI> </UL> <P>&nbsp;</P> <P><SPAN>Take your time and get change control approval or management approval in writing.</SPAN></P> <P>&nbsp;</P> <P><SPAN>Regards,</SPAN></P> Tue, 20 Oct 2026 20:12:44 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/pan-os-12-1-2-features-operational-and-performance-impact-of/m-p/1266558#M7195 OtakarKlier 2026-10-20T20:12:44Z