---
type: Addressed
product: PAN-OS
version: 10.2.16
source: common-crawl
crawl: CC-MAIN-2026-12
---

## PAN-289102

```caveat
PA-7500 Series, PA-5410, PA-5420, PA-5430, PA-5440, PA-5445, PA-3400 Series, PA-1400 Series, PA-400 Series, VM-Series, and CN-Series firewalls only
```

Fixed a race condition issue related to predict processing, which resulted in a dataplane restart and traffic loss.

## PAN-287611

Fixed an issue where, after upgrading, the firewall incorrectly calculated the UDP checksum for RTP traffic after NAT and Security policy application, which led to dropped packets and silent calls in applications.

## PAN-286897

Fixed an issue where the pan_task process stopped responding when the firewall attempted to forward files to the WildFire public cloud, which caused the dataplane to experience heartbeat failures.

## PAN-286475

Fixed an issue where the option to sort sequence numbers was missing from **Filters prefix list** in the advanced routing filters.

## PAN-285941

Fixed an issue where high memory consumption occurred on the logrcvr process.

## PAN-285894

Fixed an issue where the all_task process stopped responding, which caused the firewall to reboot unexpectedly, and traffic failures occurred.

## PAN-285590

```caveat
VM-Series firewalls on Amazon Web Services (AWS) GWLB environments only
```

Fixed an issue where the firewall CPU usage reached 100% after upgrading to PAN-OS 11.1.6-h1.

## PAN-284908

Fixed an issue where retrieving filenames from OneDrive resulted in a cache miss.

## PAN-284840

```caveat
PA-5220 firewalls only
```

Fixed an issue where custom reports were delayed when sent via email instead of being sent at the scheduled time.

## PAN-284069

Fixed an issue where, after an upgrade, the total number of logout records in the HIP database incorrectly displayed as zero.

## PAN-284066

Fixed an issue where, after an upgrade, the SNMP polled values for IF-MIB::ifInErrors displayed a high number of errors that did not match the values in the CLI show interface command.

## PAN-283664

Fixed an issue where a slow NAT leak occurred when persistent NAT was enabled. This occurred when ICMP sessions matched the persistent Dynamic IP and Port (DIPP) rule and no predict sessions were involved in that rule.

## PAN-283428

```caveat
PA-7050 Firewalls only
```

Fixed an issue where, after an upgrade, the dataplane CPU reached 100% due to packet buffer exhaustion, which resulted in general packet processing issues.

## PAN-281797

Fixed an issue where firewalls became unstable and stopped responding, which resulted in an OOM condition.

## PAN-280505

Fixed an issue where the web interface did not display a message to commit prior changes before attempting a partial configuration load.

## PAN-280409

Fixed an issue where the popup window did not appear as expected for Clientless VPN users.

## PAN-279706

```caveat
M-600 appliances only
```

) Fixed an issue where Panorama did not update all panreplay database entries after performing a commit and full push to all devices.

## PAN-277617

Fixed an issue where deleting the NTP server address caused a commit validation error. This occurred when the configuration included both primary and secondary NTP servers and the secondary server was removed.

## PAN-273727

Fixed an issue where the firewall skipped the DNS policy rule of a domain external dynamic list (EDL) during an EDL refresh.

To use this fix, run the following CLI command and commit: set deviceconfig setting ctd custom-edl-domains-continuous-reload yes/no

## PAN-271701

Fixed an issue where Advanced Services, App-ID Cloud Engine (ACE), and Enhanced Application Log stopped working due to incorrect memory usage accounting, which caused memory usage to remain at 99% after an extended period of time.

## PAN-270379

Fixed an issue where socket files created in the /tmp directory were not cleared.

## PAN-268614

Fixed an issue on the web interface where, when all rules were highlighted when a read-only admin user clicked the **Highlight Unused Rules** checkbox.

## PAN-268313

Fixed an issue where the Priority Code Point (PCP) bits in the VLAN header were not reset to 0 when a packet was received from one Layer 3 tagged interface and forwarded to another, which resulted in dropped packets.

To use this fix, run the CLI command set force-vlan-pcp-reset yes and reboot the firewall.

## PAN-267707

Fixed an issue where BFD sessions did not come up even when BGP peering was established.

## PAN-265782

Fixed an issue on Panorama where, after you enabled multihop in a BFD profile, you were unable to disable it via the web interface.

## PAN-260132

Fixed an issue where secondary IP addresses with a /32 prefix configured on Layer 3 interfaces were not reachable in FRR mode.

## PAN-260015

Fixed an issue on the firewall where the dataplane restarted due to insufficient allocation of memory buffers.

## PAN-255654

Fixed an issue where, when QoS was enabled on aggregate interfaces, the maximum aggregate interface throughput was capped, which limited network traffic. This occurred even with default QoS settings and no configured egress max-bandwidth.

## PAN-253187

```caveat
PA-5450 firewalls only
```

Fixed an issue where the class of service (CoS) priority bit was not modified, causing access points to lose connectivity to the wireless controller when traffic was routed through the firewall.

## PAN-240606

Fixed an issue where licenses expired a day before the expiry date.

## PAN-224729

Fixed an issue where you were unable to create duplicate entries in Advanced Routing AS path prepend in the BGP filter route map.

## PAN-224020

Fixed an issue where CIE validation checks on the firewall prevented configuration pushes from Panorama, which resulted in commit failures during new firewall deployment. This occurred when a template with an Authentication Profile with the **Authentication Type** as **Cloud Authentication Service** was pushed to a newly deployed firewall without internet access or without a device certificate.

## PAN-220435

```caveat
VM-Series firewalls only
```

Fixed an issue where the GlobalProtect client failed to install on the firewall.
