Console Access with Palo Alto Networks Devices in FIPS or CCEAL4 Mode

Issue

Palo Alto Networks devices running PAN-OS in FIPS or CCEAL4 mode do not respond to console connections, and no output is displayed to the terminal after the device finishes booting.

Cause

Serial consoles will be completely disabled after PAN-OS loads in FIPS or CCEAL4 mode. This is expected behavior, and is a requirement for compliance with the two information security standards.

Resolution

To restore console access to devices, they must be factory reset to a standard mode.  For more information, see How to do a Factory Reset in PAN-OS.

owner: ggarrison