I would set up a capture on the palo alto device to stage at receive, transmit, drop, and firewall to see if the palo alto is forwarding the packet in a timely manner. also check to see if there were any packets dropped " show counter global filter delta yes | match drop ". In a previous case we seen that there's a large number of out-of-order frames on the local side, leading to retransmissions. we can modify these tcp settings with the following commands. " set deviceconfig setting tcp out-of-sync ignore " " set deviceconfig setting tcp drop-out-of-wnd no" if you need help with any of the above please create a case via the support portal and an engineering will help debug further.
... View more