---
type: Addressed
product: PAN-OS
version: 11.2.4-h10
---

## PAN-292503

Fixed an issue on the firewall where the source and destination NAT IP addresses did not display in traffic & threat logs.

## PAN-290996

Fixed an issue where SNMP walks returned a value of 0 for the CPS (Connections Per Second) per vsys on firewalls after upgrading to PAN-OS 11.1.6-h3, even when active connections were present.

## PAN-290088

Fixed an issue where a memory leak occurred related to the configd process when pushing configurations from Panorama to a firewall. This occurred when the configurations contained shared policy rules.

## PAN-287838

```caveat
Panorama appliances only
```

Fixed an issue on the web interface where resetting the rule hit counter for multiple policy rules failed with the error message Failed to reset rule-hit job.

## PAN-287056

Fixed an issue where BGP export policy rules with next-hop matching failed to block the advertisement of static routes, and the firewall incorrectly matched the egress interface IP address instead of the original next-hop IP address of the static route, which caused the deny rule to fail.

## PAN-287023

Fixed an issue where a large number of logs caused the logrcvr process to stop responding.

## PAN-286848

Fixed an issue where ECMP incorrectly balanced sessions across links based on the configured metric, which led to an imbalance in traffic distribution and resulted in traffic assignment shifting disproportionately to routes with lower metrics.

## PAN-286306

Fixed an issue where, when getting transceiver information from ESCC for SFP 25G modules, the transceiver code was incorrectly updated with Unknown instead of 25GBase-SR.

## PAN-284117

```caveat
Panorama appliances in Log Collector mode only
```

Fixed an issue where the vm_agent process restarted after an upgrade.

## PAN-284073

Fixed an issue on the firewall that caused commits to fail and the web interface to become inaccessible.

## PAN-284003

Fixed an issue where clients did not receive a valid response when searching a website due to a compression error.

## PAN-282391

```caveat
Panorama appliances and Log Collectors only
```

Fixed an issue where a VLD memory leak caused increased memory use, which resulted in OOM errors.

## PAN-282359

Fixed an issue where the Panorama web interface was slower than expected.

## PAN-281649

Fixed an issue where the index size limit was incorrectly calculated and indices rolled over earlier than expected, which resulted in high memory and OOM errors.

## PAN-281509

```caveat
Panorama appliances only
```

Fixed an issue where log exports were slower than expected or failed when filtering logs after an upgrade, which resulted in timeouts or delays in displaying logs on the web interface.

## PAN-279500

Fixed an issue where TLS connections failed to establish in asymmetric routing environments if the firewall did not see server-to-client (s2c) packets of the TLS handshake.

To use this fix, run the following CLI command: debug dataplane set ssl-decrypt accumulate-client-hello asym-disable yes.

## PAN-279415

Fixed an issue where service routes configured to use a data plane interface incorrectly used the management plane interface for traffic transmission. This issue affected syslog and CRL status traffic when a custom service route was not configured.

## PAN-278812

Fixed an issue where authentication to GlobalProtect failed with the error message User not in allowed list.

## PAN-278150

Fixed an issue where the firewall removed the Authentication Key Identifier (AKID) from the certificate during SSL decryption, which caused Python 3.13 to fail with a certificate verification error.

## PAN-277417

Fixed an memory leak issue related to TLS inbound decryption.

## PAN-277147

Fixed an issue where daily scheduled reports were not generated and emailed.

## PAN-276920

Fixed an issue where web-advertisement traffic was not immediately blocked which resulted in pages loading indefinitely.

## PAN-276616

Fixed an issue on the firewall where half-duplex settings on Ethernet were not visible.

## PAN-276276

```caveat
PA-450 firewalls only
```

Fixed an issue where, after an upgrade, data that was excluded using the query builder in a custom report was still visible in the report, and the logs displayed errors related to invalid threat names being queried.

## PAN-275047

```caveat
VM-Series firewalls only
```

Fixed an issue where, after an upgrade, the firewall was unable to send logs to the Strata Logging Service (SLS) when using a specific proxy server, and the SSL connection status displayed as failed when attempting to forward logs through the web proxy.

## PAN-275032

```caveat
M-600 appliances only
```

Fixed an issue where the Elasticsearch cluster certificate (CC) status displayed with a past expiration date, which caused all shards to be unassigned.

## PAN-274671

Fixed an issue where empty traffic logdb folders were generated for each day even when trafcfic logs were not received by the logrcvr process.

## PAN-272812

Fixed an issue where SNMP monitoring of tunnel interfaces displayed zero values for received bytes and packets.

## PAN-271810

Fixed an issue where auto-negotiation advertised and negotiated 10/100 half and full duplex.

## PAN-271700

Fixed an issue where User-ID connections were lost after an HA failover.

## PAN-271560

Fixed an issue where DNS requests to malware sites were not blocked as expected, and the dns-security-categories log-level and action displayed default values instead of unavailable.

## PAN-270849

Fixed a memory leak issue related to the configd process that occurred when running consecutive commits for multiple days.

## PAN-269899

Fixed an issue where the Panorama web interface was slower than expected when querying for device tags.

## PAN-269731

Fixed an issue where Panorama did not display logs from firewalls after upgrading to PAN-OS 10.2.11 on devices due to Elasticsearch (ES) getting restarted continuously.

## PAN-268787

Fixed an issue where users were unable to log in to Panorama and the following error message was displayed: Timed out while getting config lock. Please try again. This occurred when pushing configurations to a large number of devices.

## PAN-267535

Fixed an issue where all_task processes stopped responding on the remote network firewall, which caused tunnels to go down and the pan_task CPU usage to approach 100%.

## PAN-267091

Fixed an issue on Panorama where Elasticsearch repeatedly restarted.

## PAN-266639

Fixed an issue where administrators were unable to edit or add virtual router configurations when a filter was applied to the viewer.

## PAN-263369

Fixed an issue where commits from Panorama to Panorama virtual appliances failed with the error message Internal error during commit processing. Commit/Validate failed after upgrading Panorama.

## PAN-261209

```caveat
Firewalls in active/active HA configuration only
```

Fixed an issue where the firewall displayed the HA2 status as down when the HSCI port was used for both HA2 and HA3.

## PAN-260604

Fixed an issue where the firewall displayed inaccurate throughput utilization stats in NetFlow analyzer tools.

## PAN-259881

Fixed an issue on Panorama where traffic log details were not displayed under **detailed log view**.

## PAN-258757

Fixed an issue on Panorama where upgrades failed with validation errors.

## PAN-255860

```caveat
PA-5200 firewalls only
```

Fixed an issue where the all_pktproc process stopped responding when the firewall was under a heavy traffic load.

## PAN-249384

Fixed an issue on Panorama where configuration locks were observed during a partial rulebase commit.

## PAN-246699

Fixed an issue on Panorama where **Rule Usage** and **Apps Seen** under Security policy rules stopped incrementing.

## PAN-245064

```caveat
Multi-vsys firewalls only
```

Fixed an issue where commits failed on the firewall after selecting **Export or push device config bundle** on Panorama and a force push was required.
