Issue ID | Description
--- | ---
PAN-233557 | Fixed an issue where, after using Panorama to configure per policy persistent DIPP, downgrading the firewall using Panorama and then upgrading the firewall back to a later PAN-OS release, the global DIPP configuration was not successfully converted b ack to the per policy persistent DIPP rules.
PAN-230359 | Fixed an issue where SAML authentication failed with the error message Failed to verify signature against certificate when ds:KeyName was in the IdP metadata.
PAN-227639 | Fixed an issue where the ACC displayed an incorrect DNS-base application traffic byte count.
PAN-227376 | Fixed an issue where a memory overrun caused the all_task process to stop responding.
PAN-227368 | Fixed an issue where GlobalProtect users could not connect the app to a portal or gateway and GlobalProtect Clientless VPN users were unable to access applications when authentication took longer than 20 seconds.
PAN-226418 | A CLI command was added to address an issue where long-lived sessions aged out even when there was ongoing traffic.
PAN-226198 | Fixed an issue on Panorama where the configd process repeatedly restarted when attempting to make configuration changes.
PAN-225920 | Fixed an issue where duplicate predict sessions didn't release NAT resources.
PAN-225886 | Fixed an issue where if you enabled explicit proxy mode for the web proxy, intermittent errors and unexpected TCP reconnections may have occurred.
PAN-225169 | Added a CLI command to view Strata Logging Service queue usage.
PAN-224772 | Fixed a high memory usage issue with the mongodb process that caused an OOM condition.
PAN-224145 | Fixed an issue in multi-vsys environments where, when Panorama was on a PAN-OS 10.2 release and the firewall was on a PAN-OS 10.1 release, commits failed on the firewall when inbound inspection mode was configured in the decryption policy rule.
PAN-223457 | Fixed an issue where, if the number of group queries exceeded the Okta rate limit threshold, the firewall cleared the cache for the groups.
PAN-221126 | Fixed an issue where email server profiles (Device > Server Profiles > Email and Panorama > Server Profiles > Email) to forward logs as email notifications were not forwarded in a readable format.
PAN-218555 | Fixed an issue where the firewall did not receive dynamic address updates pushed from Panorama during initial registration to Panorama.
PAN-213931 | Fixed an issue where the logrcvr process cache was not in sync with the mapping on the firewall.
PAN-206913 | Fixed an issue where, when DHCPv6 client was configured on firewalls in active/passive HA configurations, releasing the IPv6 address from the client released the IPv6 address from only the active firewall.