During a 3220 cluster upgrade, our client saw the active member report that the passive was non-functional due to a NAT oversubscription mismatch. Both members were set to default and matched before the passive was upgraded from 9.0.9 to 9.0.12. As far as I can tell, there is no change to the default oversubscription rate, but this reddit post suggests that there may be a change in behavior. Is there a change in the default behavior and is it officially documented somewhere?
Thank you very much!
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes/pan-os-9-1-addressed-issues/pan-os-9-1-5-addressed-issues.html look for PAN-140084
Manually setting the oversubscription should keep this from appearing, correct?
Yes there is, ran into this a while ago and figured out the oversubscription changes from 2x to 4x between two upgrades. Only was an issue because I was mid-upgrade though