PAN-OS 8.1.0 SMB Issues

[LukeBullimore]

Hello all,

Please be advised, there is a current issue with PAN-OS 8.1 which seems to break anything SMB related, e.g. mapped network drives. Sessions have an end reason of "resources-unavailable" and go into state "Discard" in the session table.

Upon speaking with a TAC engineer, this is a known issue and they are working towards a fix.

Edit: This is now resolved in PAN-OS 8.1.1 under BugID:

PAN-94445

Fixed an issue where Server Message Block (SMB) sessions were in a discard state with the session end reason resources-unavailable

Thanks,

Luke.

[Jacopo_Vigano · Accepted solution]

TAC suggest to create an application override policy as workaround or downgrade to 8.0.X PANOS version.

Jacopo

[dimitry86 · Accepted solution]

PAN-94445

Fixed an issue where Server Message Block (SMB) sessions were in a discard state with the session end reason resources-unavailable.

[Jacopo_Vigano · Accepted solution]

TAC suggest to create an application override policy as workaround or downgrade to 8.0.X PANOS version.

Jacopo

[teoder]

Did you try the Application Override or did you downgrade?

[koen.wauters]

Applicaton Override does the trick.

[ppeters86]

I didn't have time to mess around on Sunday when this was discovered, so we downgraded.  Thankfully that went smoothly.

[RikuPessinen]

Thanks for the info, I was just about to deploy 8.1 to one firewall :)

[teoder]

Ended up doing a downgrade too, went back to 8.0.8. I so wanted the hit counter :(

Does anyone know if there is an Issue ID for this problem?

[MaciejPaczesnyLPR]

We did the downgrade also. Waiting to resolve the issue

[tom_oconnor_utas]

We just had a day's outage due to this issue.  Palo Alto *really* should have pulled the update and warned people who have installed it.

[teoder]

So far I've had no issues with 8.1 och PA-220, not that much traffic passing through it though...

On a couple of PA-850 the only option was to do a downgrade, no SMB traffic worked as intended.

Could it be related to certian hardware platforms? What platforms have you experienced problems on?