The earliest recollection of this bug is traced back to PAN-OS 10.2.7 - July 22, 2025. This bug is fixed in PAN-OS versions 10.2.8. The firewall is responding to an ARP request for an IP address in the firewall's NAT address pool when that IP address isn't in the same subnet as the IP address of the ingress interface. Fixed an issue where the firewall responded to an ARP request for an IP address in the firewall's NAT address pool when the IP address wasn't in the same subnet as the IP address of the ingress interface. With this fix, the firewall won't send unintended GARP responses. For more information: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-7-known-and-addressed-issues/pan-os-10-2-7-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-8-known-and-addressed-issues/pan-os-10-2-8-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-release-notes/pan-os-11-0-4-known-and-addressed-issues/pan-os-11-0-4-known-issues