topic RE: "Hardware UDP session offloading" on a PA-460 in Next-Generation Firewall Discussions

"Hardware UDP session offloading" on a PA-460

asaraca — Sat, 17 Sep 2022 17:24:55 GMT

Is there a way to enable "Hardware UDP session offloading" on a PA-460 ? Currently it's set to false on our PA-460 and using the command "set deviceconfig setting session offload yes" does not affect this setting.

Thank you,

Antonio

RE: "Hardware UDP session offloading" on a PA-460

JoHyeonJae — Thu, 02 Mar 2023 00:50:09 GMT

@asaraca

I am experiencing the same as your issue on PA-440. Has the issue been resolved?

Re: "Hardware UDP session offloading" on a PA-460

TomYoung — Thu, 02 Mar 2023 02:05:48 GMT

Hi @asaraca ,

These documents say that offloading is only supported on the PA-3200, PA-5200, and PA-7000 Series. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm8cCAC So does this one. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/monitoring/take-packet-captures/disable-hardware-offload

The 1st URL mentions an FPGA that is used for it. This link -> https://www.paloaltonetworks.com/resources/pa-series-next-generation-firewalls-hardware-architectures show FPGAs for the 3 Series above and the PA-5400 Series, but not the PA-400.

So, it has never been a feature on the lower end models, and the PA-400 Series does not have FPGAs. I could be wrong but the evidence suggests the PA-400 does not have the feature.

Thanks,

Tom