---
type: Addressed
product: PAN-OS
version: 11.1.4-h25
---

## PAN-292261

Fixed an issue where the firewall repeatedly reported an unreachable
syslog server as back online when the
server remained unavailable. This resulted in misleading alternating
connection status messages in the system logs.

## PAN-287423

Fixed an issue where content loading issues occurred on IPv6 websites
due to the firewall incorrectly setting the IPv6 header flow label
to 0.

## PAN-286255

Fixed an issue where, when the firewall received an unexpected
termination request for SSL sessions, the dataplane experienced a
slow buffer resource leak.

## PAN-282069

Fixed an issue on Panorama where Security policy rules were removed
from device groups when you cloned or edited Security policy rules
that used more than 63 characters.

## PAN-280942

Fixed an issue where the logrcvr process stopped
responding.

## PAN-280698

Fixed an issue where the firewall removed the TCP timestamp from
client hello messages that did not fit in a single packet, which
resulted in connection issues.

## PAN-279901

An issue was fixed where the firewall dropped fragmented TLS
ClientHello packets, which blocked access to certain websites. This
occurred because the packets arrived truncated, in varying sizes and
orders, and the firewall's heuristics failed to handle them
correctly.

To enable this fix, run: debug dataplane set ssl-decrypt
accumulate-client-hello disjoined yes.

## PAN-273949

Fixed an issue where the firewall generated the following error
message in the snmpd logs:
pan_get_keystr_from_cryptod(pan_snmpinterface.c:181):
Key X2F1dGhfa2V5 import from cryptod failed.

## PAN-271273

Fixed an issue where dynamic update downloads failed when
IPv6 firewalling was enabled on the
firewall and both IPv4 and IPv6 were configured on the management
interface.

## PAN-270193

Fixed an issue where the Panorama management server changed its
certificate authority (CA) unexpectedly, which caused managed
firewalls to disconnect.

## PAN-268614

Fixed an issue on the web interface where, when all rules were
highlighted when a read-only admin user clicked the
Highlight Unused Rules checkbox.

## PAN-265621

Fixed an issue where the restart option for
IPSec tunnels was greyed out when you attempted to restart the
tunnel from NetworkIPSec TunnelsIKE Info.

## PAN-260300

```caveat
PA-5410, PA-5420, PA-5430, PA-5440 and PA-5445 firewalls only
```

Fixed an issue related to the
all_pktproc process where DPC slot 3 stopped
responding.

## PAN-259535

Fixed an issue where the firewall failed to boot up after running
power cycle tests due to ehmon process heartbeat
failures.
