About johnwalshaw

I just updated and found that it resulted in a slow boot loop. Would be forwarding traffic for approx 2-3 minutes and then reboot and all things related to coming up would take apox 8 minutes (traffic forwarding outage). So I rolled back to the pre-update snapshot. Didn't have time to look into it. It boot looped three times before I rolled back.  I was coming from 10.1.3 with stability / uptime of 152 days.  I'll do some research or wait for the next P version and possibly some release notes that speak to this boot loop issue. ... View more

How do you have path monitoring configured? Maybe post a screenshot similar to what I posted? ... View more

Also, forgot to mention that I have each ISP on a separate virtual router, therefore there is no backdoor zero route possibility via another ISP link. The result is that path monitoring to specified internet destinations is working without fault. ... View more

I'm re-reading the thread and love that you have a script to harvest the gateway IP from the DHCP interface. The issue of your lease expiring is interesting as that should renew at the lease half-life.  That is the problem I would perhaps think about.  The process to trigger (schedule) the lease renew might be worth looking at. But is this an ISP issue at the core also?  Regarding what the target is that you ping, there might be an opportunity there.  Here is my config as feel it is representative of the internet.   ... View more

I have tested DNS proxy on Palo and it worked great.  I have not investigated the log detail. ... View more