@Raido_Rattameister correction: SSD was replaced, and when we failback traffic, the issue returned. Eventually, TAC confirmed that we hit the following bug:
PAN-194395 Fixed an issue where the firewall dropped all decrypted outbound (SSL Forward Proxy) HTTP/2 traffic after you upgraded to PAN-OS 9.1.14, which caused websites that used HTTP/2 to become inaccessible.
Same issue, old discussion: https://www.reddit.com/r/paloaltonetworks/comments/vzrann/panos_9114_software_buffer_depletion/ The bug description is way off. thanks, myky
... View more