Firewall stopped sending traffic to internet from trust zone, after upgrade from 10.1.3 to 10.1.5h2

[Gitesh]

I have upgraded 3 set of palo alto PA-3220 (3 pairs) to 10.1.5h2.

Two set works good without any issue.

When upgrade completed with last set, the active firewall stopped sending traffic from trust zone to internet, though it has all valid routes in it. Post I shifted all traffic on secondary firewall and all started working.

This is the issue I am facing. Any suggestions?

Have opned the case with Palo Alto on saturday with priority S2, yet no reply from them. 

[kiwi]

Hi @Gitesh ,

It's really hard to identify the issue with the information provided. 

Have you checked how the firewall identifies the traffic ?

I mean, do you see any traffic ingressing / egressing the firewall ? Any particular denies in the traffic logs or drops in the global counters ? Any traffic logs at all (showing incomplete maybe) ?

It's great that you were able to fail over and get it to work on your secondary device but we can't really guide you much with the provided data.

Cheers,

-Kiwi.