Dataplane processes restarting when SD-WAN is configured

On NGFW deployments where SD-WAN is enabled and meets the following requirements, the dataplane may restart due to an out-of-memory condition.

• PANOS version 10.1.6-h4+ or 10.1.7
• And, all SD-WAN links down

This could also happen during a device reboot because all SD-WAN tunnels would be down on reboot. 

Reference PAN-201627 in 10.1.7 known issues

• Palo Alto Firewalls (NGFW)
• PAN-OS 10.1.6-h4+ or 10.1.7
• SD-WAN configured .

• When EDL/FQDN refresh or configuration commit occurs, the "pan_comm" process creates new child processes as a result.
• This child process is forked without waiting for the previous child process to END, leading to out of memory condition.

1. Downgrade to 10.1.6-h3 or earlier
2. Or, upgrade to the latest 10.2 release as 10.2 is not impacted by this issue.