---
type: Addressed
product: PAN-OS
version: 9.1.16
source: common-crawl
crawl: CC-MAIN-2026-12
---

## PAN-235168

Fixed an issue where disk space became full even after clearing old logs and content images.

## PAN-216656

Fixed an issue where the firewall was unable to fully process the user list from a child group when the child group contained more than 1,500 users.

## PAN-215911

Fixed an issue that resulted in a race condition, which caused the configd process to stop responding.

## PAN-215488

Fixed an issue where an expired Trusted Root CA was used to sign the forward proxy leaf certificate during SSL Decryption.

## PAN-211997

Fixed an issue where large OSPF control packets were fragmented, which caused the neighborship to fail.

## PAN-211602

Fixed an issue where, when viewing a WildFire Analysis Report via the web interface, the **detailed log view** was not accessible if the browser window was resized.

## PAN-209696

Fixed an issue where link-local address communication for IPv6, BFD, and OSPFv3 neighbors was dropped when IP address spoofing check was enabled in a Zone Protection profile.

## PAN-207740

Fixed an issue that resulted in a race condition, which caused the configd process to stop responding.

## PAN-205453

Fixed an issue where running reports or queries under a user group caused the reportd process to stop responding.

## PAN-203563

Fixed an issue with Content and Threat Detection allocation storage space where performing a commit failed with a CUSTOM_UPDATE_BLOCK error message.

## PAN-203402

Fixed an intermittent issue where forward session installs were delayed, which resulted in latencies.

## PAN-203147

```caveat
Firewalls in FIPS-CC mode only
```

Fixed an issue where the firewall unexpectedly rebooted when downloading a new PAN-OS software image.

## PAN-201910

PAN-OS security profiles might consume a large amount of memory depending on the profile configuration and quantity. In some cases, this might reduce the number of supported security profiles below the stated maximum for a given platform.

## PAN-201639

Fixed an issue with Saas Application Usage reports where **Applications with Risky Characteristics** displayed only two applications per section.

## PAN-199612

Fixed a sync issue with firewalls in active/active HA configurations.

## PAN-198871

Fixed an issue when both URL and Advanced URL licenses were installed, the expiry date was not correctly checked.

## PAN-198693

Fixed an issue where decrypted SSH sessions were interrupted with a decryption error.

## PAN-198038

A CLI command was added to address an issue where long-lived sessions were aging out even when there was ongoing traffic.

## PAN-197919

Fixed an issue where, when path monitoring for a static route was configured with a new Ping Interval value, the value was not used as intended.

## PAN-197847

Fixed an issue where disabling the enc-algo-aes-128-gcm cipher did not work when using an SSL/TLS profile.

## PAN-197729

Fixed an issue where repeated configuration pushes from Panorama resulted in a management server memory leak.

## PAN-197576

Fixed an issue where commits pushed from Panorama caused a memory leak related to the mgmtsrvr process.

## PAN-197219

Fixed an issue where the following error message was not sent from multi-factor authentication PingID and did not display in the browser: Your company has enhanced its VPN authentication with PingID. Please install the PingID app for iOS or Android, and use pairing key:<key>. To connect, type "ok".

## PAN-195790

Fixed an issue where syslog traffic that was sent from the management interface to the syslog server even when a destination IP address service route was configured.

## PAN-195583

Fixed an issue where, after renaming an object, configuration pushes from Panorama failed with the commit error **object name is not an allowed keyword**.

## PAN-194175

Fixed an issue on Panorama where a commit push to managed firewalls failed when objects were added as source address exclusions in a Security policy and **Share Unused Address and Service Objects with Devices** was unchecked.

## PAN-193808

Fixed a memory leak issue in the mgmtsrvr process that resulted in an OOM condition.

## PAN-193763

Fixed an issue on the firewall where the dataplane CPU spiked, which caused traffic to be affected during commits or content updates.

## PAN-192681

Fixed an issue where HIP database storage on the firewall reached full capacity due to the firewall not purging older HIP reports.

## PAN-190950

Fixed an issue where creating or modifying a GlobalProtect portal configuration failed in FIPS mode with the following error message: clientless-vpn enc-algo-rc4 unexpected here.

## PAN-189518

Fixed an issue where incoming DNS packets with looped compression pointers caused the dnsproxyd process to stop responding.

## PAN-189379

Fixed an issue where FQDN based Security policy rules did not match correctly.

## PAN-187829

Fixed an issue where the web_backend and httpd processes leaked descriptors, which caused activities that depended on the processes, such as logging in to the web interface, to fail.

## PAN-187761

Fixed an issue where, during HA failover, the newly passive firewall continued to pass traffic after the active firewall had already taken over.

## PAN-184537

Fixed an issue where GlobalProtect requested for passwords that contained non ASCII characters (ö) to be reentered when refreshing the connection.

## PAN-183319

Fixed an issue on Panorama where commits remained at 99% due to multiple firewalls sending out CSR singing requests every 10 minutes.

## PAN-183297

Fixed an issue where, when the firewall received a large amount of user information, the firewall was unable to output IP-address to username mapping information via XML API.

## PAN-183126

Fixed an issue on Panorama where you were able to attempt to push a number of active schedules to the firewall that was greater than the firewall's maximum capacity.

## PAN-182845

Fixed an issue that caused devices to be removed from Panorama when one device was added by one user, but a Commit and Push operation was completed by a second user before the first user completed a Commit of the added device change.

## PAN-181839

Fixed an issue where Panorama Global Search reported **No Matches found** while still returning results for matching entries on large configurations.

## PAN-181759

```caveat
Firewalls in active/active HA configurations only
```

Fixed an issue where firewall configuration files were not synced.

## PAN-181295

Fixed an issue where clicking on a rule in the **App Dependency** tab after a commit or commit all did not display the rule correctly.

## PAN-179624

Fixed an issue where setting the password complexity to **Require Password Change on First Login** caused the user to be prompted with certificate authentication.

## PAN-177942

Fixed an issue where, when grouping HA peers, access domains that were configured using multi-vsys firewalls deselected devices or virtual systems that were in other configured access domains.

## PAN-177054

Fixed an issue where, when you disabled a NAT rule, the **Destination Translation** value **none** displayed in blue and was still able to be modified to a different value.

## PAN-175176

Fixed an issue in which CBC ciphers for TLS traffic to port 28443 on Panorama were enabled.

## PAN-174680

Fixed an issue where, when adding new configurations, Panorama didn't display a list of suggested template variables when typing in a relevant field.

## PAN-173179

Fixed an issue where the rem_addr field in Terminal Access Controller Access-Control System (TACACS+) authentication displayed the management or service route IP address of the firewall instead of the source IP address of the user.

## PAN-161958

Fixed an issue where the FQDN refresh timer was pushed from Panorama appliances on PAN-OS 9.0 and later releases to firewalls running a PAN-OS 8.1 release.

## PAN-158511

Fixed an issue where configurations loaded and committed to Panorama changed external dynamic list references on Security policy rules to **NONE** when Antivirus Protection was not installed.

## PAN-143930

Fixed an issue where a process (routed) restarted due to the number of BGP peers exceeding the supported configuration.

## PAN-78762

Fixed an issue where you were unable to reset a VPN tunnel via the firewall web interface (**Network > IPSec Tunnels > Tunnel Info > Restart**).
