- We have been having issues with VPN tunnels freezing between PA's on different sites; since PANOS8.x when a failover is done in an active - passive configuration. Current workaround is to enable tunnel monitoring with failover action. This was not needed in PANOS 7.x, for these kind of situations. the failover works for all the rest of ongoing traffic towards the Internet, only the ipsec tunnel hangs, is this tunnel monitoring a REQUIRED setting in PANOS 8.x; or should it not failover stateless , as all the rest does ? M.
... View more