Thursday, December 21, 2017

Palo Alto upgrade and RADIUS issues

We tried to upgrade a pair of HA Palo Alto firewalls over the weekend to a new code revision. After doing so, we found that RADIUS requests were being dropped by an authentication server. After downgrading to a lower version, everything began working again.

My thought now is that there's some change in RADIUS packet structure which is causing the server to drop the query. Has anyone run into this before, and if so, what did you do to fix it?



No comments:

Post a Comment