---
type: Addressed
product: PAN-OS
version: 10.2.7-h3
source: common-crawl
crawl: CC-MAIN-2026-12
---

## PAN-240197

Fixed an issue where configuration changes made in Panorama and pushed to the firewall were not reflected on the firewall.

## PAN-239144

Fixed an issue where the web interface was slower than expected when logging in, committing, and pushing changes after upgrading to PAN-OS 10.2.7.

## PAN-238792

Fixed the following device certificate issues:

- The firewall was unable to automatically renew the device certificate-Fetching device certificates failed incorrectly with the error message OTP is not valid.
- Firewalls disconnected from Strata Logging Service after renewing the device certificate.
- The device certificate was not correctly generated on the log forwarding card (LFC).
- WildFire cloud logs did not log thermite certificate usage status.

## PAN-237935

Extended the offline PAN-DB, Panorama, and WildFire certificates which were previously set to expire on September 2, 2024.

## PAN-237876

Extended the firewall Panorama root CA certificate which was previously set to expire on April 7th, 2024.

## PAN-234929

Fixed an issue where tabs in the **ACC** such as **Network Activity** **Threat Activity** and **Blocked Activity** did not display data when you applied a **Time** filter of **Last 15 Minutes**, **Last Hour**, **Last 6 Hours**, or **Last 12 Hours**, and the data that was displayed with the **Last 24 Hours** filter was not accurate. Reports that were run against summary logs also did not display accurate results.

## PAN-234279

Fixed an issue where the ikemgr process crashed due to an IKEv1 timing issue, which caused commits to fail with the following error message: Client ikemgr requesting last config in the middle of a commit/validate, aborting current commit.

## PAN-232377

Fixed an issue where the AddrObjRefresh job failed when the useridd process restarted.

## PAN-231771

Fixed an issue where the firewall issued /box/getserv/ requests with PAN-OS 7.1.0 and did not take device certificates.

## PAN-231169

```caveat
PA-220 firewalls only
```

Fixed an issue where an unused plugin incorrectly used memory.

## PAN-228273

```caveat
Panorama appliances in FIPS-CC mode only
```

Fixed an issue where the Elasticsearch cluster did not come up, and the show log-collector-es-cluster health CLI command displayed the status as red. This caused log ingestion issues for Panorama appliances in Panorama mode or Log Collector mode.

## PAN-227568

When a device certificate is installed, renewed, or removed, the firewall will reconnect to the WildFire cloud to use the newest certificate.

## PAN-224954

Fixed an issue where, after upgrading and rebooting a Panorama appliance in Panorama or Log Collector mode, managed firewalls continuously disconnected.

## PAN-224067

Fixed an issue where cookie authentication did not work for GlobalProtect when an authentication override domain was configured in the SAML authentication profile.

## PAN-224060

```caveat
PA-220 Series firewalls only
```

Fixed an issue where multiple dataplane processes stopped responding after an upgrade.

## PAN-223652

Fixed an issue where data was not thread safe and led to concurrent read/write issues that caused GPSVC to stop working unexpectedly.

## PAN-223270

Fixed an issue with Virtual Wire links on firewalls in active/active HA configurations where the forwarding path was not preserved in HTTP/2 cleartext traffic with asymmetric routing.

## PAN-222002

Fixed an issue where content updates failed with the error message Unable to get key pancontent-8.0.pass from cryptod. Error -9.

## PAN-218988

Fixed an issue in FIPS mode where, when importing a certificate with a new private key, and the certificate used the name of an existing certificate on the Panorama, the following error message was displayed: Mismatched public and private keys.

## PAN-218057

```caveat
PA-7000 Series firewalls only
```

Fixed an issue where internal path monitoring failed due to a heartbeat miss.

## PAN-217289

Fixed an intermittent issue where HTTP/2 traffic caused buffer depletion.

## PAN-216214

```caveat
Panorama managed firewalls in active/active HA configurations only
```

Fixed an issue where the HA (high availability) status displayed as **Out of Sync** (**Panorama > Managed Devices > Health**) if local firewall configurations were made on one of the HA peers. This caused the next HA configuration sync to overwrite the local firewall configuration made on the HA peer.

## PAN-215576

Fixed an issue where the userID-Agent and TS-Agent certificates were set to expire on November 18, 2024. With this fix, the expiration date has been extended to January 2032.

## PAN-208395

Fixed an issue where user authentication failed in multi-vsys environments with the error message User is not in allowlist when an authentication profile was created in a shared configuration space.

## PAN-202361

Fixed an issue where packets queued to the pan_task process were still transmitted when the process was not responding.

## PAN-189769

Fixed an issue on Amazon Web Services (AWS) Gateway Load Balancer (GWLB) deployments with overlay routing enabled where, when a single firewall was the backend of multiple GWLBs, packets were re-encapsulated with an incorrect source IP address.

## PAN-181706

Fixed an issue where the logrcvr process stopped responding after upgrading to PAN-OS 10.1.
