NAT is not configurable when HA clusters are configured. HA clusters do not support NAT.

PA-7500 Series firewalls in an NGFW cluster do not support the failover of application-level gateway (ALG) sessions.

In cases where traffic flow is redirected through the IFL/HSCI between NGFW cluster nodes, you might experience packet drops and intermittent failures with the establishment of new connections if the total bandwidth throughput is over 370G if you're using 400G HSCI. If you're using100G HSCI, anything over 80G will start seeing packet drops.

ECMP is not supported for equal-cost routes where one or more of those routes has a virtual router or logical router as the next hop. None of the equal-cost routes will be installed in the Forwarding Information Base (FIB).

Enter any random username and password (or just press enter) in the pop-up dialog on the satellite to retrigger the authentication process in the following cases:

When the preferred lifetime of the IPv6 address on the MGT interface expires, existing IPv6 sessions are disconnected. RFC 8415 indicates that existing communications must remain for the duration of the valid lifetime if the preferred lifetime expires (sessions must be active during the time between the preferred lifetime and valid lifetime). However, the NGFW limitation is that sessions are lost when the preferred lifetime expires.