---
type: Addressed
product: PAN-OS
version: 11.2.7-h1
---

## PAN-294436

Fixed an issue where polling failed for ethernet interfaces due to the physical port counters read from the MAC being 0.

## PAN-293842

Fixed an issue where the hybrid-SWG service proxy stopped working after upgrading to PAN-OS 11.1.6-h13 due to the firewall failing to establish the listening interface.

## PAN-293673

Fixed an issue where the firewall stopped all tasks due to an OOM condition caused by a scheduled log export using FTP to an external FTP server.

## PAN-292503

Fixed an issue on the firewall where the source and destination NAT IP addresses did not display in traffic and threat logs.

## PAN-291060

Fixed an issue where commits failed due to the configured connected gateway IPv6 address in the NAT64 policy exceeding the 31 character limit.

## PAN-290996

Fixed an issue where SNMP walks returned a value of 0 for the CPS (Connections Per Second) per vsys on firewalls after upgrading to PAN-OS 11.1.6-h3, even when active connections were present.

## PAN-290088

Fixed an issue where a memory leak occurred related to the configd process when pushing configurations from Panorama to a firewall. This occurred when the configurations contained shared policy rules.

## PAN-289714

```caveat
Prisma Access only
```

Fixed an issue where persistent commit failures occurred due to a missing transformation script when downgrading from PAN-OS 10.2.0 to PAN-OS 10.1.0.

## PAN-289268

Fixed an issue where internet access through Secure Web Gateway (SWG) proxy nodes did not work when the default internet access policy rule source user was not **known-user**.

## PAN-288939

Fixed an issue where the logrcvr process stopped responding due to an invalid SSL context being used for socket communication, which caused commits to fail.

## PAN-284878

```caveat
Firewalls in active/passive HA configurations only
```

Fixed an issue where commits failed due the useridd process restarting.

## PAN-284003

Fixed an issue where clients did not receive a valid response when when searching a website due to a compression error.

## PAN-280409

Fixed an issue where the popup window did not appear as expected for Clientless VPN users.

## PAN-279901

An issue was fixed where the firewall dropped fragmented TLS ClientHello packets, which blocked access to certain websites. This occurred because the packets arrived truncated, in varying sizes and orders, and the firewall's heuristics failed to handle them correctly.

To enable this fix, run: debug dataplane set ssl-decrypt accumulate-client-hello disjoined yes

## PAN-279690

Fixed an issue where the the all_pktproc process stopped responding, which caused the firewall to unexpectedly restart.

## PAN-279415

Fixed an issue where service routes configured to use a data plane interface incorrectly used the management plane interface for traffic transmission. This issue affected syslog and CRL status traffic when a custom service route was not configured.

## PAN-276616

Fixed an issue on the firewall where half-duplex settings on Ethernet were not visible.

## PAN-271810

Fixed an issue where auto-negotiation advertised and negotiated 10/100 half and full duplex.

## PAN-268787

Fixed an issue where users were unable to log in to Panorama and the following error message was displayed: Timed out while getting config lock. Please try again. This occurred when pushing configurations to a large number of devices.

## PAN-255860

```caveat
PA-5200 firewalls only
```

Fixed an issue where the all_pktproc process stopped responding when the firewall was under a heavy traffic load.

## PAN-252706

Fixed an issue where the URL filtering response page for **Continue** and **Override** did not work with IPv6 Router Advertisement (RA) or Multicast Listener Query (MLQ) for IPv6-to-IPv6 and IPv6-to-IPv4 traffic.
