04-30-2026 01:30 PM - edited 04-30-2026 01:31 PM
Hello,
We have random issue with Windows 11 Enterprise ( 10.0.26200) hosts not installing ARP reply from a stack of PAs running 10.2.7-h8.
I have captured the traffic with the (non ip) filter and I can see the ARP requests and the replys. The hosts are sourcing DHCP from a PA interface with standard options for mask, default gateway and domain .
The host will get an IPaddress and the palo will show the hosts arp entry. Additionally, if you clear the ARP entry on the FW, it will refresh with the same info. The PCAP shows the windows host hammering away with ARP requests for the gateway and the FW sending ARP replys. I can take another host , plug into the same port and it works just fine. Everything points to the Windows machine.
Has anyone else seen this?
Thanks,
Nathan
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
