Werk #19909: Fix crash in check on unknown Palo Alto HA state 'initial'

Component

Checks & agents

Title

Fix crash in check on unknown Palo Alto HA state 'initial'

Date

May 6, 2026

Level

Trivial Change

Class

Bug Fix

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

2.6.0b1 Not yet released	Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT
2.5.0p2 Not yet released	Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT
2.4.0p29 Not yet released	Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT

Previously, after an HA recovery, Palo Alto firewalls could briefly report an initial HA peer state via SNMP OID .1.3.6.1.4.1.25461.2.1.2.1.12.0. The Palo Alto State check plugin didn't recognize this state, causing a crash and generating a crash report instead of handling it gracefully.

The plugin now maps the initial state to WARN, so the service correctly shows WARN during this brief transition period.

To the list of all Werks