PAN-OS-11.1.2-h3 - No incomming traffic after upgrade

[Harikrishnan.P]

Hi,

We recently upgraded our Palo Alto 1410 Firewall to PAN-OS-11.1.2-h3 from PAN-OS-11.0.4-h1.

After Upgrade there was no incoming traffic from external networks. There were no hits or logs showing incoming traffic.

Internet Outbound traffic was going through normally.

IPSEC VPN tunnels were working normally.

Support team checked and wanted us to downgrade to the previous version.

Is this a bug in PAN-OS 11.1 ?

Has anyone ever faced this issue after PAN-OS upgrades ?

Should we install the base image for 11.1 before we upgrade to 11.1.2-h3?

Any ideas and suggestiions are welcome.

Thanks

Hari

[SCALTEL]

Yes the base image is downloaded.

[ttsws]

Same here.

Panorama upgrade fails in install after a few seconds.

11.0.3-h5 -> 11.1.4-h1 fails.

11.1.0 -> 11.1.4-h1 fails

11.1.0 -> 11.1.3-h6 fails

The error message are the same.

Still waiting for an analysis from our partner.

[Tobi]

Any news on the TAC case?
We are experiencing the same problem.

[ttsws]

ASC TAC says. they found similar issues. The solution was to delete all software images and redownload the required ones.

This did not help in our case.

Recommendation was to upgrade via CLI to get more error output, but in our case the output was the same which is displayed by the GUI.

I hope, they will escalate this to PAN TAC.

[ttsws]

Had a session with Palo TAC. root level access at the beginning of the week. Expected solution did not work. Next solution: reinitialize Elastic Search, losing all logs. Not an option. Palo engineer wanted to check with colleagues for other workarounds. Yesterday I got new suggestions, which I have not tested, yet: Upgrade to 11.0.5 or 11.06 and then to 11.1.4 or go directly to 11.1.5 which fixes PAN-258757.