We had migration activity that causing the outage. After review the technical detail. we notice when merge service object, TCP-80 over write service-http.
the actual firewall service-http use port 80 and 8080. Expedition pre-define as 80 only, that causing the problem.
One more thing, when show running security policy and nat policy, palo alto not sort output of ip address, service, it's very painful to compare the result that make migration more challenge and risk.
... View more