---
type: Addressed
product: PAN-OS
version: 11.0.3-h5
---

## PAN-242561

Fixed an issue where GlobalProtect tunnels disconnected shortly after
being established when SSL was used as the transfer protocol.

## PAN-241772

Fixed an issue where, when TLSv1.3 was used, an incorrect error
message invalid padding was displayed
instead of the expected error message Invalid server
certificate.

## PAN-240786

Fixed an issue on firewalls in HA configurations where VXLAN sessions
were allocated, but not installed or freed, which resulted in a
constant high session table usage that was not synced between the
firewalls. This resulted in a session count mismatch.

## PAN-240487

Fixed an issue where fan speed increased significantly after
upgrading the firewall.

## PAN-240197

Fixed an issue where configuration changes made in Panorama and
pushed to the firewall were not reflected on the firewall.

## PAN-238996

Fixed an issue where commits did not complete and remained in a
pending state due to a race condition. With this fix, the commit
will fail after 60 seconds and not remain in a pending state.

## PAN-238769

```caveat
VM-Series firewalls in FIPS-CC mode only
```

Fixed an issue
where upgrading Panorama caused all locally created Security policy
rule actions to Deny.

## PAN-236120

Fixed an issue where the /opt/panlogs partition reached capacity due
to the logdb-quota for the User-ID log folder not being matched.

## PAN-234929

Fixed an issue where tabs in the ACC such as
Network Activity
Threat Activity and Blocked
Activity did not display data when you applied a
Time filter of Last 15
Minutes, Last Hour,
Last 6 Hours, or Last 12
Hours, and the data that was displayed with the
Last 24 Hours filter was not accurate.
Reports that were run against summary logs also did not display
accurate results.

## PAN-232800

Fixed an issue where critical disk usage for /opt/pancfg increased
continuously and the system logs displayed the following message:
Disk usage for /opt/pancfg exceeds limit,
<value> percent in use.

## PAN-231802

Fixed an issue where an Advanced Routing BGP session flapped with
commits when BGP peer authentication was enabled.

## PAN-230746

Fixed an issue on the web interface where device groups with a large
number of managed firewalls displayed the
Policy page more slowly than
expected.

## PAN-229691

Fixed an issue on Panorama where configuration lock timeout errors
were observed during normal operational commands by increasing
thread stack size on Panorama.

## PAN-228515

Fixed an issue where the Elasticsearch cluster health status
displayed as yellow or red due to Elasticsearch SSH tunnel
flaps.

## PAN-228187

Fixed an issue where the management server restarted due to the
virtual memory exceeding the limit.

## PAN-227397

Fixed an issue where selective pushes on Panorama removed a
previously pushed configuration from the firewalls.

## PAN-227368

Fixed an issue where the GlobalProtect app was unable to connect to a
portal or gateway and GlobalProtect Clientless VPN users were unable
to access applications if authentication took more than 20
seconds.

## PAN-223798

Fixed an issue on the firewall where, when Advanced Routing was
enabled, PIM join messages were not sent to the RN due to a missing
OIF.

## PAN-223259

Fixed an issue where selective pushes failed with the error message
Failed to generate selective push configuration.
Unable to retrieve last in-sync configuration for the device,
either a push was never done or version is too old. Please try a
full push.

## PAN-220907

```caveat
VM-Series firewalls only
```

Fixed an issue where large
packets were dropped from the dataplane to the management plane,
which caused OSPF neighborship to fail.

## PAN-220659

Fixed an issue on the firewall where scheduled Antivirus updates
failed when external dynamic lists were configured on the
firewall.

## PAN-218928

Fixed an issue where the reportd process stopped
responding after querying logs or generating ACC reports with some
filters.
