---
type: Addressed
product: PAN-OS
version: 10.2.13-h10
---

## PAN-289102

```caveat
PA-7500 Series, PA-5410, PA-5420, PA-5430, PA-5440, PA-5445, PA-3400 Series, PA-1400 Series, PA-400 Series, VM-Series, and CN-Series firewalls only
```

Fixed a race condition issue related to predict processing, which resulted in a dataplane restart and traffic loss.

## PAN-288930

Fixed an issue where, when ACE was enabled, traffic from cloud applications randomly matched an incorrect **cloud-apps** policy rule.

## PAN-286475

Fixed an issue where the option to sort sequence numbers was missing from **Filters prefix list** in the advanced routing filters.

## PAN-285894

Fixed an issue where the all_task process stopped responding, which caused the firewall to reboot unexpectedly, and traffic failures occurred.

## PAN-284908

Fixed an issue where retrieving filenames from OneDrive resulted in a cache miss.

## PAN-284116

Fixed an issue where mTLS decryption bypass did not work when the decryption profile was configured with the maximum TLS version as TLS 1.3.

## PAN-284066

Fixed an issue where, after an upgrade, the SNMP polled values for IF-MIB::ifInErrors displayed a high number of errors that did not match the values in the CLI show interface command.

## PAN-283467

```caveat
PA-3400 Series firewalls only
```

Fixed an issue where the firewall unexpectedly rebooted and entered maintenance mode due to a ctd-agent out-of-memory (OOM) condition. This occurred during advanced services load testing and a high volume of IoT EAL log forwarding.

## PAN-283331

Fixed an issue where selective pushes to managed devices failed when the **User ID Master Device** was configured.

## PAN-282640

Fixed an issue where custom reports showed incomplete data when exported in CSV format from Panorama.

## PAN-281797

Fixed an issue where firewalls became unstable and stopped responding, which resulted in an OOM condition.

## PAN-280698

Fixed an issue where the firewall removed the TCP timestamp from client hello messages that did not fit in a single packet, which resulted in connection issues.

## PAN-280505

Fixed an issue where the web interface did not display a message to commit prior changes before attempting a partial configuration load.

## PAN-280409

Fixed an issue where the popup window did not appear as expected for Clientless VPN users.

## PAN-279706

```caveat
M-600 appliances only
```

Fixed an issue where Panorama did not update all panreplay database entries after performing a commit and full push to all devices.

## PAN-279336

Fixed an issue where the CLI did not display a message to commit prior changes before loading a partial configuration.

## PAN-279176

Fixed an issue where the configuration audit displayed inaccurate information after partially loading the configuration via the CLI, which caused the audit to flag the configuration as deleted or changed.

## PAN-277755

Fixed an issue that caused the request system private-data-reset CLI command to fail.

## PAN-277617

Fixed an issue where deleting the NTP server address caused a commit validation error. This occurred when the configuration included both primary and secondary NTP servers and the secondary server was removed.

## PAN-273949

Fixed an issue where the firewall generated the following error message in the snmpd logs: pan_get_keystr_from_cryptod

(pan_snmpinterface.c:181): Key X2F1dGhfa2V5 import from cryptod failed.

## PAN-271432

Fixed an issue where the firewall was unable to decrypt SSL traffic when using forward proxy and HSM with an ECDSA signing certificate.

## PAN-271175

Fixed an issue where the all_task process stopped responding with a SIGABRT.

## PAN-270849

Fixed a memory leak issue related to the configd process that occurred when running consecutive commits for multiple days.

## PAN-270248

Fixed an issue where the firewall failed to forward logs to a SNMP trap server if the SNMP manager IP address was unable to be resolved.

## PAN-270193

Fixed an issue where the Panorama management server changed its certificate authority (CA) unexpectedly, which caused managed firewalls to disconnect.

## PAN-269700

Fixed an issue where commits to service connection firewalls from Panorama failed.

## PAN-269499

Fixed an issue where the firewall stopped responding when receiving a high number of logs.

## PAN-268708

Fixed an issue where PDF summary and email reports displayed IPv6 addresses instead of IPv4 addresses.

## PAN-268614

Fixed an issue on the web interface where, when all rules were highlighted when a read-only admin user clicked the **Highlight Unused Rules** checkbox.

## PAN-268313

Fixed an issue where the Priority Code Point (PCP) bits in the VLAN header were not reset to 0 when a packet was received from one Layer 3 tagged interface and forwarded to another, which resulted in dropped packets. To use this fix, run the CLI command set force-vlan-pcp-reset yes and reboot the firewall.

## PAN-268017

Fixed an issue where the IP address-to-user mapping timeout was triggered and the Inactivity TTL was refreshed unexpectedly

## PAN-265782

Fixed an issue on Panorama where, after you enabled multihop in a BFD profile, you were unable to disable it via the web interface.

## PAN-264883

```caveat
PA-7080 appliances with LPCs only
```

Fixed an issue where syslog forwarding over TCP stopped after upgrading.

## PAN-264040

Fixed an issue where AAAA DNS queries went out even when **IPv6 firewalling** was disabled.

## PAN-262593

Fixed an issue where traffic to websites failed on the Google Chrome web browser on Secure Web Gateway (SWG) nodes.

## PAN-261429

Fixed an issue where the show auth radius-require-msg-authentic command CLI displayed no output.

## PAN-260132

Fixed an issue where secondary IP addresses with a /32 prefix configured on Layer 3 interfaces were not reachable in FRR mode.

## PAN-257117

Fixed an issue where CSV or PDF exports of zones did not contain all zones.

## PAN-255914

```caveat
VM-Series firewalls on Amazon Web Services (AWS) environments only
```

Fixed an issue where a newly bootstrapped firewall required a management server restart, relicensing, or license push from Panorama to invoke the device certificate.

## PAN-255759

Fixed an issue where the firewall was unable to match HIP data with the correct anti-malware object for Windows Defender.

## PAN-255654

Fixed an issue where, when QoS was enabled on aggregate interfaces, the maximum aggregate interface throughput was capped, which limited network traffic. This occurred even with default QoS settings and no configured egress max-bandwidth.

## PAN-253187

```caveat
PA-5450 firewalls only
```

Fixed an issue where the class of service (CoS) priority bit was not modified, causing access points to lose connectivity to the wireless controller when traffic was routed through the firewall.

## PAN-241230

Fixed an issue where the SNMP get request status value for Panorama connections was incorrect.

## PAN-224729

Fixed an issue where you were unable to create duplicate entries in Advanced Routing AS path prepend in the BGP filter route map.

## PAN-224020

Fixed an issue where CIE validation checks on the firewall prevented configuration pushes from Panorama, which resulted in commit failures during new firewall deployment. This occurred when a template with an Authentication Profile with the **Authentication Type** as **Cloud Authentication Service** was pushed to a newly deployed firewall without internet access or without a device certificate.

## PAN-222307

```caveat
M-600 appliances only
```

Fixed an issue where the reportd process stopped responding.

## PAN-212182

Fixed an issue where TLS 1.3 connections failed if the server sent a certificate request after sending its certificate.

## PAN-201298

Fixed an issue where unknown TCP traffic caused errors and high shared memory usage.
