topic Policy behaviour change in General Topics

Policy behaviour change

Farzana — Thu, 31 Aug 2017 05:26:31 GMT

Hello,

We know that policy behaviour changed from version PAN-OS 7.1 as per the link below.

https://live.paloaltonetworks.com/t5/Configuration-Articles/PAN-OS-7-1-Policy-behavior-change-application-default/ta-p/75664

However, we upgraded from 8.0.0 or 8.0.2 to 8.0.4 and noticed that it was not enforced in 8.0.0/8.0.2. Was there still a bug/issue prior to 8.0.4?

Re: Policy behaviour change

pulukas — Sun, 03 Sep 2017 12:05:32 GMT

There is nothing listed in the release notes for this particular issue. So if it is known it is not in the public notes.

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os-release-notes

Re: Policy behaviour change

reaper — Mon, 04 Sep 2017 08:58:19 GMT

This is a change of default behavior introduced in 7.1.0, long before 8.0 which means it is already in the base code for 8.0.

If you did notice the behavior was not being enforced, this is unintentional and should be reported to TAC so it can be investigated. I've not seen other customers report this behavior however