>
    Strata Copilot
    Device Restarted
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. NGFW Incidents Reference
    4. Device Restarted
    Download PDF
    Next-Generation Firewall

    Device Restarted

    Table of Contents

    Device Restarted

    Incident Code
    INC_NGFW_FIREWALL_RESTARTED
    Severity
    Warning
    Category
    Device
    Subcategory
    Hardware
    Description
    This alert triggers when it has been detected that this firewall or Panorama is reboots unexpectedly
    Raise Condition
    This incident is raised when an unexpected reboot is detected on the device. This is typically identified by a sudden reset of the system uptime. For example, if the system uptime drops to a value significantly lower than its previously recorded uptime without a scheduled maintenance window or known user-initiated reboot.
    Clear Condition
    When the system is up and active for 48 hours.
    Probable Root Cause Incident
    "INC_NGFW_AGENT_CRASH_BRDAGENT_REBOOT",
    "INC_NGFW_PA3200_DP_RESTART_INTERNAL_LINK_DOWN",
    "INC_NGFW_PA400_VULN_PANOS_BOOT_REBOOT",
    "INC_NGFW_PA5200_DP_RESTART_INTERNAL_LINK_DOWN",
    "INC_NGFW_POWER_LOSS_DETECTED",
    "INC_NGFW_UNEXPECTED_REBOOT_HEARTBEAT_FAIL"

    © 2026 Palo Alto Networks, Inc. All rights reserved.