Nominated Discussion: Unable to Change Hardware UDP Session Offloading Setting

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Community Team Member
No ratings

This Nominated Discussion Article is based on the post "Unable to change hardware udp session offloading setting as false" by @JoHyeonJae  and responded to by @TomYoung. Read on to see the discussion and solution

 

I am using PA-440 on the PAN-OS 10.2.3-h4.

Due to performance degradation issues, hardware session offloading and hardware udp session offloading was changed to false through the following commands.

> configure
# set deviceconfig setting session offload no
# commit

Screenshot 2023-02-28 at 5.36.56 PM.png

Screenshot 2023-02-28 at 5.37.22 PM.png

 

However, hardware session offloading has changed normally, but hardware udp session offloading has an issue that does not change.

 

Moreover, the system display that 'set session udp-offload no' is an invalid command.
Screenshot 2023-03-02 at 9.30.50 AM.png

 

These documents say that offloading is only supported on the PA-3200, PA-5200, and PA-7000 Series.  https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm8cCAC  So does this one.  https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/monitoring/take-packet-captures/disable-h...

 

The 1st URL mentions an FPGA that is used for it. This link -> https://www.paloaltonetworks.com/resources/pa-series-next-generation-firewalls-hardware-architecture... show FPGAs for the 3 Series above and the PA-5400 Series, but not the PA-400.

 

So, it has never been a feature on the lower end models, and the PA-400 Series does not have FPGAs. I could be wrong but the evidence suggests the PA-400 does not support this feature which is why you're getting the "Invalid Syntax" error.

 

Rate this article:
Comments
L1 Bithead

Hello

Hardware UDP session offloading is not supported on the PA-440 model. The feature is available on specific models only. The "Invalid Syntax" error indicates it's not available on PA-400 Series. 

  • 2654 Views
  • 1 comments
  • 0 Likes
Register or Sign-in
Labels
Article Dashboard
Version history
Last Updated:
‎07-06-2023 02:52 PM
Updated by: