---
type: Addressed
product: PAN-OS
version: 11.1.4-h27
---

## PAN-301801

Fixed an issue on Log Collectors where the Elasticsearch process fluctuated intermittently between green and red states, which led to interruptions in log collection. This issue occurred when the number of shards exceeded the cluster's maximum supported threshold of greater than 1000 shards per Elasticsearch instance.

## PAN-292159

A fix was made to address [CVE-2025-4615](https://security.paloaltonetworks.com/CVE-2025-4615).

## PAN-271216

A fix was made to address [CVE-2025-4615](https://security.paloaltonetworks.com/CVE-2025-4615).

## PAN-291661

Fixed an issue on Panorama appliances and Log Collectors where, after an upgrade, Elasticsearch intermittently entered into a Red state before automatically recovering.

## PAN-286164

A fix was made to address [CVE-2025-4614](https://security.paloaltonetworks.com/CVE-2025-4614).

## PAN-282093

Enhanced the CLI command request legacy reset to delete the legacy certificate files that were being used to connect with the secondary Panorama appliance.

## PAN-278296

Fixed an issue where the system MAC address of the aggregate interface was the same on the active firewall and the passive firewall after an upgrade.

## PAN-272539

```caveat
Panorama appliances on Microsoft Azure environments only
```

Fixed an issue where user to IP address mapping was missing for some users connected to specific Prisma Access gateways, which caused the collection layer Azure firewall to not form the mapping.

## PAN-271221

A fix was made to address [CVE-2025-4615](https://security.paloaltonetworks.com/CVE-2025-4615).

## PAN-251715

Fixed an issue where the firewall closed the SSL connection to the user ID agent.
