PANOS 8.0.x restart IPSEC tunnels from GUI

Showing results for 
Show  only  | Search instead for 
Did you mean: 

PANOS 8.0.x restart IPSEC tunnels from GUI

L2 Linker

Dear all,


we found out that we are not able to restart VPN tunnels in PANOS 8.0.x from GUI because its grayed out and it is an expected behavior as you can see the message "Restart disabled because OK".


The conclusion is that on version 8.0.x it's not possible anymore to restart the tunnel from GUI if the tunnel is up and running, but you can still restart the tunnel from CLI.


Unfortunately there is no official document discussing this subject yet.


Will Palo Alto support us with an official document in the near future? We dont wanted to open a TAC case for this question so we are directing this question to the community.


Thanks and kind regards,




L1 Bithead

You can reset the tunnel from CLI via

reset vpn ipsec-sa tunnel <tunnel-name>

L0 Member

Hi Rene,


were you able to solve this issue? Now, I have the same issue with my Palo Alto.


Thank you,



What version of PAN-OS are you actually running? PAN-OS 9.1 and higher definitely support restarting straight from the GUI, and PAN-OS 8 hasn't been support since 2019. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!