About dawoodJabbar

Yes exactly today Palo Alto TAC team investigate this issue with me about six  hours they  collect log and try everything downgrade but no luck actually they say that its data plane issue and will investigate more in the log they took and if they nothing found it’s RMA ... View more

Have you ever done a failover before and have it work, yes we have tested the ha failover about 6 Months ago. is this a new Active/Passive configuration? no. On your passive firewall, what is the actual status of the device? the management plane works fine but the data plane is not working the data plane session count is zero. When you go through and reset things and configure it? after upgrading the passive i thought its a configuration issue so i factory rest the device to sure by using this command request system private-data-reset and also do the factory rest by palo alto factory reset maintenance mode same thing no responses on data plane     are you seeing the auto-commit and subsequent commits succeed? yes, and I do some change and the commits working fine   Attempting to ping an interface isn't really that great of a test with PAN, as there's moving parts to having the traffic allowed. When you did the factory reset on the passive firewall, did you remember to active an interface-management profile that allowed ICMP and actually allow it on your rulebase assuming you weren't relying on intrazone-default? yes i add icmp in the interface-management profile and apply this on the interface that was under test,and i creat new rule to allowed the traffic to pass the firewall ,   i also try do downgrade to 10.1.5h2 after factory rest and no luck   ... View more

I try to upgrade the device to the latest pan-os 2.0.1 and still the same also factory reset the firewall and setup the basic configuration to check the interface but still same ... View more

the LLDP is enabled on the passive firewall, I try to make the passive firewall become active but still faced the same issue also remove it from ha and check the interface but no luck, any idea ... View more

the LLDP Is enabled on the passive firewall, I try to suspend the local device for ha in the active firewall to move the traffic to the passive but the device does not forward any traffic, and it becomes active in ha, I also try to remove it from ha and upgraded the device to the latest pan-os 2.0.1 also factory reset the device but still same ... View more

the LLDP is enabled on the Passive firewall kindly check the attachment for that, I try to make the passive to be active but still have the same issue, I try to factory reset the firewall and try to do basic configuration just to check the issue is related to ha or we have a hardware issue in the data plane. ... View more

sys log Server IP is 192.168.1.25 😉 ... View more