Disable Hardware Offload

L1 Bithead

Disable Hardware Offload

Hi All,


Whats the purpose of "Disable Hardware Offload" in Palo Alto Firewall ?


Any traffic that is offloaded to the field-programmable gate array (FPGA) offload processor is also excluded, unless you turn off hardware offload.


Can anyone please explain this more simpler manner, which i cant underrstand the concept and where to apply this ?


Thanks a lot for your time and consideration.


L4 Transporter

Re: Disable Hardware Offload

@harshaabba  Disable hardware offload is mainly used when you are troubleshooting for traffic through the firewall problem.   For example, session setup correctly, but during half way of the session, session got ended for no good reason.  


Or TAC want to rule out if it is the problem is related to the hand off the Hardware Offloader (FPGA) or the traffic is not handle properly by the Offloader.


Or you need to capture the packets during the mid of a session,  once the traffic is hand off to the offloader, you won't be able to capture the packets on the firewall.



Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!