---
type: Addressed
product: PAN-OS
version: 11.0.5
---

## PAN-255868

```caveat
PA-3400 Series firewalls only
```

Fixed an issue where the firewall entered maintenance mode after enabling kernel data collection during the silent reboot.

## PAN-255577

Fixed an issue where push scope changes remained empty and Edit selections >
OK did not work for admin-based users after
upgrading Panorama.

## PAN-253317

```caveat
VM-Series firewalls on Microsoft Azure environments only
```

Fixed an issue where you were unable to log in to the firewall after a private data reset.

## PAN-251563

Added CPLD enhancement to capture external power issues.

## PAN-251013

Fixed an issue on the web interface where the Virtual Router and Virtual System configurations for the template incorrectly showed as none.

## PAN-249019

Fixed an issue where the all_pktproc process stopped responding, which caused the firewall to become unresponsive.

## PAN-248427

Fixed an issue where push operations took longer than expected to complete.

## PAN-248105

Fixed an issue where the GlobalProtect SSL VPN tunnel immediately disconnected due to a keep-alive timeout.

## PAN-247403

```caveat
Panorama virtual appliances only
```

Fixed an issue where the push scope CLI command took longer than expected, which caused the web interface to be slow.

## PAN-246772

Fixed an issue on the firewall where the dataplane went down due to a path monitor failure caused by an OOM condition related to the pan_task process.

## PAN-246431

Fixed an issue where a Push to Device operation remained at the state None when performing a selective push to device groups and templates that included both connected and disconnected firewalls.

## PAN-246215

Fixed an issue where the sleep time for a suspended pan_task process caused configuration and policy updates to be blocked.

## PAN-245850

Fixed an issue on Panorama appliances in active/passive HA configurations where the firewalls entered an HA out-of-sync status and jobs failed on the passive appliance with the error message Could not merged running config from file.

## PAN-245125

```caveat
VM-Series firewalls in Microsoft Azure environments only
```

Fixed an issue where file descriptors were not closed due to invalid configurations.

## PAN-245041

Fixed an issue where the WF-500 appliance returned an error verdict for every sample in FIPS mode.

## PAN-244907

Fixed an issue where ports did not go down when moving from an active state to a suspended state.

## PAN-244894

Fixed an issue where turning off mprelay logging caused mprelay heartbeat failure.

## PAN-244836

A knob was introduced to toggle the default behavior of BGP in the Advanced Routing stack to not suppress duplicate updates. By default, the prefix updates are suppressed for optimization.

## PAN-244746

Fixed an issue where changes committed on Panorama were not reflected on the firewall after a successful push.

## PAN-244622

Fixed an issue where FIB repush did not work with Advanced Routing enabled.

## PAN-244548

Fixed an issue where ECMP sessions changed destination MAC addresses mid-session, which caused connections to be reset.

## PAN-244227

Fixed an issue where inconsistent FIB entries across the dataplane were not detected.

## PAN-243463

Fixed an issue where high Enhanced Application log traffic used excess system resources and
caused processes to not work.

## PAN-242309

Fixed an issue where a higher byte count (s2c) was observed for DNS-Base application.

## PAN-241018

```caveat
VM-Series firewalls in Microsoft Azure environments only
```

Fixed a Data Plane
Development Kit (DPDK) issue where interfaces remained in a
link-down stage after an Azure hot plug event.

## PAN-240596

Fixed an issue where all_task stopped responding due to an invalid memory address.

## PAN-240477

Fixed a temporary hardware issue that caused PAN-SFP-PLUS-CU-5M to not be able to link up on PA-3400 and PA-1400 Series firewalls.

## PAN-240174

Fixed an issue where, when LSVPN serial numbers and IP address authentication were enabled, IPv6 address ranges and complete IPv6 addresses that were manually added to the IP address allow or exclude list were not usable after a restart of the gp_broker process or the firewall.

## PAN-239662

Fixed an issue where the NSSA default route from the firewall was not generated to advertise even though the backbone area default route was advertised during a graceful restart.

## PAN-239337

Fixed an issue where the log_index was suspended and corrupted BDX files flooded the
index_log.

## PAN-238625

Fixed an issue where, when the physical interface went down, the SD-WAN Ethernet connection state
still showed UP/path-monitor due to the
Active URL SaaS monitor connection state remaining
UP/path-monitor.

## PAN-238610

Fixed an issue with the Panorama virtual appliance where, after the mgmtsrvr
restarted on the passive appliance, stale IP address tags were
pushed to the connected firewalls with the message
clear all registered ip
addresses.

## PAN-238592

```caveat
PA-3410 firewalls only
```

Fixed an issue where the firewall did not boot up after upgrading due to a TPM lockout condition that persisted for over 24 hours.

## PAN-237991

Fixed an issue where the log collector sent fewer logs than expected to the syslog server.

## PAN-237657

Fixed an issue with 100% CPU utilization in the varrcvr process that occurred during an incremental WildFire update.

## PAN-237614

Fixed an issue on Panorama where the API command request system disk add failed.

## PAN-237208

Fixed an issue where the reportd process stopped and the firewall rebooted.

## PAN-236261

Fixed an issue where a proxy server was used for external dynamic list communication even when
the dataplane interface was configured through service routes.

## PAN-236244

Fixed an issue where you were unable to select authentication profiles via the web interface.

## PAN-235807

Fixed an issue where static ND entries were not reachable after a reboot.

## PAN-235585

Fixed an issue where, when custom signatures and predefined signatures shared the same literal pattern part, the custom signature caused an incorrect calculation for the length of the predefined signature, which resulted in App-ID not detecting correctly.

## PAN-234489

Fixed an issue where a User Principle Name (UPN) was incorrectly required in the pre-logon machine certificate.

## PAN-234169

Fixed an issue where downloading files failed or was slower than expected due to malware scanning
even when the session was matched to a Security policy rule with no
Anti-Virus profile attached.

## PAN-233684

Fixed an issue on Panorama where Push to Devices or Commit and Push operations took longer than expected on the web interface.

## PAN-233207

Fixed an issue where the configd process stopped responding when a partial configuration revert operation was performed.

## PAN-231439

Fixed an issue where, when a VoIP call using dynamic IP and NAT was put on hold, the audio became one-way due to early termination of NAT ports.

## PAN-229832

Fixed an intermittent issue where MLAV and URL cloud connectivity were lost.

## PAN-228624

Fixed an issue where FIB entries were deleted due to a sysd process connection error.

## PAN-228386

Fixed an issue with session caching where the reportd process stopped responding due to null values.

## PAN-228043

Fixed an issue on firewalls on active/active HA configurations where packets dropped during
commit operations when forwarding traffic via an HA3 link when an
Aggregate Ethernet interface or data interface was used as an HA3
link.

## PAN-227641

Fixed an issue where Preview Changes and Change Summary when saving changes did not open a new window when clicked.

## PAN-227233

Fixed an issue where the combination signature aggregation criteria in a Vulnerability Protection
profile was incorrectly blank even though a value was set.

## PAN-226489

Fixed an issue where Panorama was unable to push scheduled Dynamic Updates to firewalls with the
error message Failed to add deploy job. Too many (30)
deploy jobs pending for device.

## PAN-226260

Fixed an issue where support for CBC ciphers with some authentication algorithms was only available in FIPS mode.

## PAN-226108

Fixed an issue where the masterd process was unable to start or stop the sysd process.

## PAN-225963

Fixed an issue where the IP address-to-user mapping was not correct.

## PAN-225228

Fixed an issue where filtering Threat logs using any value under THREAT
ID/NAME displayed the error Invalid
term.

## PAN-223418

Fixed an issue where heartbeats to the brdagent process were lost, resulting in the
process not responding, which caused the firewall to reboot.

## PAN-222253

Fixed an issue on Panorama where policy rulebase reordering under View Rulebase by Groups (Policy > <policy-rulebase>) did not persist if you reordered the policy rulebase by dragging and dropping individual policy rules and then moved the entire tag group.

## PAN-221571

Fixed an issue on the web interface where the Security policy rule hit count remained at 0 for
some rules even though the Traffic logs showed live hits.

## PAN-221041

Fixed an issue where the following error message was seen frequently in the system logs: Clearing snmpd.log due to log overflow.

## PAN-221003

Fixed an issue where you were unable to uncheck firewalls in HA configurations from the device group when Group HA Peers was enabled.

## PAN-220640

```caveat
PA-220 firewalls only
```

Fixed an issue where the firewall CPU percentage was miscalculated, and the values that were displayed were incorrect.

## PAN-220601

Fixed an issue with missing logs when one log collector in a log Collector Group became
unreachable.

## PAN-219690

Fixed an issue where GlobalProtect authentication failed when authentication was SAML with CAS and the portal was resolved with IPv6.

## PAN-218521

```caveat
M-600 Appliances in Log Collector mode only
```

) Fixed an issue where Panorama continuously rebooted and became unresponsive, which consumed excessive logging disk space and prevented new log ingestion.

## PAN-218331

Fixed an issue where you were unable to export or download packet captures from the firewall when context switching from Panorama.

## PAN-217674

Fixed an issue where RADIUS authentication failed when the destination route of the service route was configured with an IPv4 address with more than 14 characters.

## PAN-217489

Fixed an issue with firewalls in active/passive HA configurations where the passive firewall MAC flapping occurred when the passive firewall was rebooted.

## PAN-215905

```caveat
PA-3400 Series firewalls only
```

Fixed an issue where silent packet drops were observed on interfaces.

## PAN-215430

Fixed an issue where dynamic IP address NAT with SIP intermittently failed to convert RTP Predict
sessions.

## PAN-214682

Fixed an issue where the firewall sent incorrectly encoded the supported_groups extension in the Client Hello when acting as a forward proxy with decryption profile max version TLSv1.2.

## PAN-213173

Fixed an issue where Preview Changes under Scheduled Pushes did not launch the Change Preview window.

## PAN-212553

Fixed an issue where the ikemgr process stopped responding due to memory corruption, which caused VPN tunnels to go down.

## PAN-209574

Fixed an issue with HTTP2 traffic where downloading large files did not work when decryption was enabled.

## PAN-207972

Fixed an issue on the web interface where the BGP routing table did not display advertised routes.

## PAN-205482

Fixed an issue related to the configd process where Panorama displayed the error
Server not responding when editing policy
rules.

## PAN-200946

Fixed an issue with firewalls in active/passive HA configurations where GRE tunnels went down due to recursive routing when the passive firewall was booting up. When the passive firewall became active and no recursive routing was configured, the GRE tunnel remained down.

## PAN-196146

```caveat
VM-Series firewalls only
```

Fixed an issue where hostname validation failed due to the firewall not taking the hostname provided in init.cfg.

## PAN-194968

Fixed an issue on the web interface where Antivirus updates were not able to be downloaded and installed unless Apps and Threads updates were downloaded and installed first, and the Antivirus content list displayed as blank. The resulting error message from the update server was also not reflected in the web interface.

## PAN-174454

Fixed an issue where the firewall did not fetch group and user membership due to the Okta sync domain not matching the active directory sync domain.
