Are PA-devices affected by the packets of death?

[mikand]

For more information see Not Just AstLinux Stuff: Packets of Death and http://www.kriskinc.com/intel-pod

http://sourceforge.net/p/e1000/bugs/119/?page=3 might be related aswell.

In short, a magic combo in packets will make the nic go completely offline. Only a powercycle (reboot will not help) will bring it back online (nice DoS capability). Seems to affect at least Intel 82574L ethernet controllers.

[mikand]

So ehm noone who knows if and if so which models of PA devices uses Intel 82574L ethernet controllers - and are they affected by the "packet of death"?

[sdurga]

We are in the process of replaying the packets in our lab. We will update you soon.

[sdurga · Accepted solution]

PA is not effected by this as PA does not use intel drivers.

Thanks,

Sandeep T

[mikand]

Thanks! 🙂

However this is not driver related but hardware related.

From your answer it means that intel ethernet controllers are being used but in this case no PA-device is affected (im thinking not only the firewalls itselfs but also the panorama appliance and the other existing or upcoming applianceboxes)?

[sdurga]

I meant existing Paloalto is not using intel hardware and therefore no intel drivers are used, thus we are not effected. With regards to your virtual environment which is running panorama, it all depends on the NIC hardware used and will be beyond the scope of Paloalto. Regarding upcoming appliance boxes, I do not have any information.