Panorama can't proxy web interface after upgrade to 8.1.16

[dschoenm]

Same here with Panorama PA-100 and 2x2 PA5050 Firewalls, after upgrade to 8.1.16 (coming from 8.1.15).

[RageshD]

our VM-300Firewall has the same issue , where Panorama was running on 9.0.9

Firewall on 8.1.16(after upgrade- i too faced the same error for temp i have downgraded the OS version  again to 8.1.15-h3 and it working up .

Its  has to be bug with version 8.1.16.

Error:CreateRemoteAPPwebsession:Responce code received 302

[fjwcash]

The latest update to Chrome 85 has fixed the "Connect through NAT'd connection" issue.  Currently using Chrome 85.0.4183.102, and I can login to Panorama again. 

The fix for the "Switch device context" issue is targeted for 8.1.17 sometime in October.

[BatyukhnoE]

After downgrade Panorama to 8.1.15 the issue still exists. Connect from Panorama to FW v8.1.16 is not possible.

[fjwcash]

Correct.  The issue is with PanOS 8.1.16.  If the firewalls are running that, Panorama can't switch device context to them.  You need to downgrade Panorama and the firewalls to 8.1.15.

Or, 8.1.17 has been released, and they say this has been fixed with that release.  We haven't upgraded any firewalls yet to test this.

[Arjang999 · Accepted solution]

I just upgraded one of my boxes 820, to 8.1.17. 

the bug is fixed.

[fjwcash]

Thanks for the confirmation! 

[jaszinho]

I have upgraded my pano to 8.1.17 but the switching issue still persist.

pano cant load firewalls that are using 8.1.16 version.

[fjwcash]

Correct. It's an issue in PanOS and Panorama version 8.1.16.

Both Panorama and the firewalls need to be running 8.1.15 or 8.1.17.