SSL Forward Proxy fails with "Out of firewall resources: memory." errors in Prisma Access.

• The device configuring SSL Forward Proxy cannot access the websites via one of the SPNs.
• In the decryption log, "Out of firewall resources: memory." errors are observed.
• The device can access the websites if they are excluded from SSL decryption.

• Prisma Access(SASE)
• SSL forward Proxy
• Decryption

Software Issue.

1. The issue is resolved under PAN-251895 in PAN-OS 10.2.10.
2. Upgrade to the above version or higher will resolve the issue.
3. The workaround is to "Disable WildFire Inline Cloud Analysis and Advanced Threat Prevention Inline Cloud Analysis on the firewall"  as documented in the PAN-OS 10.2.9 release notes.