PAN-OS 10.2.17 HA A/P - Mgt interface reported as duplicate IP of data interface

[LeeFrancis2]

After installing PAN-OS 10.2.17 to a PA-440 HA A/P pair  ( to address - CVE-2025-4615 PAN-OS: Improper Neutralization of Input in the Management Web Interface . ) 'duplicate IP' system logs reported where the stated MAC address appears to be the fw mgt interface. This is reported as a duplicate of the 'facing' data interface.

Example:

Received conflicting ARP on interface ethernet1/n.nn indicating duplicate IP n.n.n.n, sender mac 8c:36:nn.nn.nn

Anyone else experienced this behaviour ?

[reaper]

did you make sure to set the internal dataplane interface to a unique ip with sufficiently sized subnetmask (e.g. 10.0.0.1/24) and the management interface on a different unique ip with identical subnetmask (e.g. 10.0.0.2 255.255.255.0) ?

[LeeFrancis2]

I can confirm the ip addressing of both mgt and (its dft gw) data plane interface is appropriate ( unique address same subnet/mask )

Also this device has been operational on several previous PAN-OS versions with this configuration,  and only start logging dup IP after upgrade to 10.2.17.

I am in the process of getting a PAN case raised via my distributor, and suspect this is a bug.

Wanted to get feedback/assistance from Live contributors, but posted as perhaps early warning to others.

KR,

Lee