07-08-2021 05:16 AM - edited 07-08-2021 05:26 AM
I just upgraded from a PA 500 to a PA 820 and something is throwing me for a loop. In all of my reports and in the monitoring section under App Scope the firewall is reporting what appears to be ipv6 addresses, they are in the format of: "::678b:540:ffff:0". I'd prefer to see the ipv4 address as it is much simpler to hunt down the offending user, etc. Any way I can disable ipv6 reporting on the PA 820? I am in PAN OS 10.1.
I should mention that the traffic logs are showing the ipv4 address.
Thanks.
07-08-2021 08:59 AM
This is a known issue, PAN-167327 & PAN-167870 are P1 by engineering and resolved in the next release of 10.1.x.
Some of the IPv4 get rendered as IPv6 addresses, and other times the addresses are in hexadecimal opposed to decimal. Important note, this does not affect data plane processing, just rendering on the MGT plane.
Please note at this time 10.1.0 does not have a preferred or recommended status by Palo Alto's TAC (bookmark this page).
Prior to upgrade of software, please review known issues & upgrade considerations, too.
Best shot would be to downgrade to a preferred release like 10.0.6 to get reporting features back to full functionality until 10.1 earns the preferred status.
07-08-2021 08:59 AM
This is a known issue, PAN-167327 & PAN-167870 are P1 by engineering and resolved in the next release of 10.1.x.
Some of the IPv4 get rendered as IPv6 addresses, and other times the addresses are in hexadecimal opposed to decimal. Important note, this does not affect data plane processing, just rendering on the MGT plane.
Please note at this time 10.1.0 does not have a preferred or recommended status by Palo Alto's TAC (bookmark this page).
Prior to upgrade of software, please review known issues & upgrade considerations, too.
Best shot would be to downgrade to a preferred release like 10.0.6 to get reporting features back to full functionality until 10.1 earns the preferred status.
07-08-2021 09:20 AM
Thanks. Not going to downgrade as we are currently in our downtime here (school) so will hope something gets released in 10.1.x that will be preferred status before we start back up.
07-08-2021 10:42 AM
No guarantees here, but, typically this occurs 1-3 months post release. Go-live date was June 4th, so we may be able to sneak something in before schools return 🙂
08-18-2021 07:29 AM
10.1.2 still not solved 😞
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!