Websites stopped working after update

[ToniE]

Hello,

We have updated 10.2.6-h3 to 10.2.8-h3 earlier and recently to 10.2.10-h9 but in both times we had to do rollback to 10.2.6-h3 because our websites stopped working.

Everything else seemed to work except inbound traffic to these applications. Traffic totally stopped. Not even one hit in traffic log after update.

Have you seen anything similar?

[samcarn]

---

@ToniE wrote:

Hello,

We have updated 10.2.6-h3 to 10.2.8-h3 earlier and recently to 10.2.10-h9 but in both times we had to do rollback to 10.2.6-h3 because our websites stopped working.

Everything else seemed to work except inbound traffic to these applications. Traffic totally stopped. Not even one hit in traffic log after update.

Have you seen anything similar?

---

I think the network or firewall configuration issue after the updates. Have you checked if any new security settings or rules were applied during the upgrade that might block inbound traffic?
Ensure the ports and protocols are properly configured and verify that there are no conflicts in the firewall or reverse proxy settings. It might also help to check the logs for any errors or warnings related to traffic blocking.

Hope! it would be helpful!

[mshekh]

Hi @ToniE ,

You can run the packet capture at firewall and check the counters to understand that why traffic is getting dropped at firewall if you have a plan to test again with upgraded PAN-OS also check the logs at unified section to see if you have any logs generated at firewall related to affected traffic.

Once you identified the reason for drop then you can work to fix the issue, if still not able to figure it out then you can engage to TAC for further assistance.

Getting Started: Packet Capture

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClTJCA0