End-of-Life (EoL)

Networking Changes

There is a networking change in default behavior for PAN-OS 8.0.
PAN-OS 8.0 has the following changes in default behavior.
The BGP peer connection settings include Multi Hop, which is the TTL value in the IP header. The default value of 0 means 2 for eBGP prior to PAN-OS 8.0.2, and it means 1 beginning with PAN-OS 8.0.2.
First packet broadcasting
(PAN-OS 8.0.1 and later 8.0 releases) The option to broadcast the first packet for a session to all the dataplanes on a firewall is now disabled by default on PA-5000 Series firewalls: the first packet goes only to the first dataplane (DP0). Enabling first packet broadcasting improves firewall performance during session setup. However, the dataplanes become unstable when you enable both first packet broadcasting and jumbo frames. To enable or disable first packet broadcasting, use the
set session broadcast-first-packet
[no | yes]
CLI command.

Recommended For You