Fixed an issue where a memory leak associated with some display CLI commands caused instability.

(OCTEON, MIPS, platforms only) Fixed an issue where the dataplane became unresponsive. With this fix, the data planeoperates stably.

Fixed an intermittent issue where firewall restarted unexpectedly while processing zip files.

(VM-Series firewalls in Azure with Accelerated Networking and Data Plane Development Kit (DPDK) enabled) Fixed an issue where firewalls experienced increasing interface receive errors, which led to intermittent traffic impact and application downtime.

Fixed an issue where a Commit and Push operation on Panorama did not successfully push configuration changes to Prisma Access endpoints. This occurred when the system reported that not all commit jobs were triggered. With this fix, Commit and Push operations now correctly apply configurations to Prisma Access.

Fixed an issue where ACE applications did not match the correct Security policy rules when the service was not set to Application Default after an upgrade, which caused traffic to be incorrectly denied.

Fixed an issue where, after upgrading Panorama, a custom admin role with Object Level Changes disabled did not automatically populate out-of-sync firewalls in the push scope.

Fixed an issue where importing PKCS12 certificates failed with the error Import of certificate and private-key failed. Failed to extract certificate.

(KVM VM-Series firewalls only) Fixed an issue where ARP entries were incomplete after an upgrade to an affected release.

Fixed an issue where you were unable to add logging drives to the firewall, and validation errors occurred when pushing configurations from Panorama.

Fixed an issue where commits intermittently failed on some Prisma Access nodes with the error message client pppoed phase 1 failure.

Fixed an issue where SWG Explicit Proxy Kerberos authentication bypass did not occur for some URLs that matched a configured URL category.

Fixed an issue where SD-WAN SaaS monitoring for HTTPS URLs continuously flapped, which caused frequent traffic shifting between ISPs. This occurred due to the firewall unexpectedly hitting resource limits for monitoring.

Fixed an issue where an expired SD-WAN license caused SD-WAN tunnels to become unavailable, which resulted in traffic interruptions. With this fix, the device provides logs and commit messages about expired licenses.

Fixed an issue where multiple EDL fetches were queued and did not complete.

Fixed an issue where committing a scheduled configuration push on Panorama caused the configd process to stop responding unexpectedly.

(Firewalls in HA configurations only) Fixed an issue where CPLD did not power cycle the firewall after internal packet path monitoring failures occurred, and both firewalls instead became simultaneously non-functional after a reboot.

(VM-Series firewalls only) Fixed an issue where enabling TLS1.3 in a decryption profile prevented access to websites.