Disable Hardware Offload

[harshaabba]

Hi All,

Whats the purpose of "Disable Hardware Offload" in Palo Alto Firewall ?

Any traffic that is offloaded to the field-programmable gate array (FPGA) offload processor is also excluded, unless you turn off hardware offload.

Can anyone please explain this more simpler manner, which i cant underrstand the concept and where to apply this ?

Thanks a lot for your time and consideration.

[nextgenhappines]

@harshaabba  Disable hardware offload is mainly used when you are troubleshooting for traffic through the firewall problem.   For example, session setup correctly, but during half way of the session, session got ended for no good reason.  

Or TAC want to rule out if it is the problem is related to the hand off the Hardware Offloader (FPGA) or the traffic is not handle properly by the Offloader.

Or you need to capture the packets during the mid of a session,  once the traffic is hand off to the offloader, you won't be able to capture the packets on the firewall.