12-06-2020 03:45 PM
Hi Joe,
The Palo firewalls normally does a L4 checksum on the dataplane and you ca enable/disable it on the dataplane with the command that you used below, however on the 5200 and 3200 models there is a L4 checksum that it does on the network processor too, if your issue matches the conditions in the above post, you will have to disable it on network processor and keep the L4 checksum on the dataplane, that should not compormise any of your security posture.
Below is a doc that I could find explaining both dataplane and network processor L4 checksums:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLpICAW
Hope that helps,
Varun Rao
