Fixed an issue where internal and external DNS names did not resolve when connected to a GlobalProtect gateway.

Fixed an issue on Panorama where selective push operations failed when plugin configurations included access-domain or log-collector references.

Fixed an issue where GlobalProtect throughput was reduced after an upgrade.

Added a CLI command to enable and disable AHO software offload optimization.

Fixed an issue where Panorama pushed commits took longer than expected to complete without displaying an error message when committing due to slow cloud-app compilation.

(VM-Series firewalls only) Fixed an issue where enabling TLS1.3 in a decryption profile prevented access to websites.

Fixed an issue where software packet buffers were completely utilized when performing a Data Loss Prevention longevity test.

Added a debug CLI command to address where remote networks for Prisma Access tenants randomly dropped monitoring packets from peer devices, which caused tunnels to be marked as down. This occurred when a CPU core suddenly experienced high utilization.

To utilize this fix, run debug dataplane set ssl-decrypt use-new-peek-window yes.

Fixed an issue where an External Dynamic List (EDL) fetch with an invalid certificate was skipped on newly provisioned GlobalProtect gateway instances.

Fixed an issue where sessions ended with the message decrypt error in the logs for traffic that matched a no-decrypt policy.

Fixed an issue where commit operations took longer than expected to complete due to EDL timeouts occurring on passive nodes when a service route was enabled.