aaron.axvig/firewallissues
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update PAN-OS 11.1 files

Browse Source
This commit is contained in:
aaron.axvig
2026-04-15 14:57:19 -05:00
parent 8a243e3d9c
commit 10f549ef2a
84 changed files with 3207 additions and 3509 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/data/issues/PAN-OS/addressed/11.1.1.md
+17 -51
View File
@@ -6,38 +6,28 @@ version: 11.1.1
## PAN-239241
Extended the root certificate for WildFire appliances to December 31,
2032.
Extended the root certificate for WildFire appliances to December 31, 2032.
## PAN-238792
Fixed the following device certificate issues:
- The firewall was unable to automatically renew the device
certificate-Fetching device certificates failed incorrectly
with the error message OTP is not
valid.
- Firewalls disconnected from Strata Logging Service
after renewing the device certificate.
- The device certificate was not correctly generated on the
log forwarding card (LFC).
- WildFire cloud logs did not log thermite certificate usage
status.
- The firewall was unable to automatically renew the device certificate-Fetching device certificates failed incorrectly with the error message OTP is not valid.
- Firewalls disconnected from Strata Logging Service after renewing the device certificate.
- The device certificate was not correctly generated on the log forwarding card (LFC).
- WildFire cloud logs did not log thermite certificate usage status.
## PAN-237935
Extended the offline PAN-DB, Panorama, and WildFire certificates
which were previously set to expire on September 2, 2024.
Extended the offline PAN-DB, Panorama, and WildFire certificates which were previously set to expire on September 2, 2024.
## PAN-237876
Extended the firewall Panorama root CA certificate which was
previously set to expire on April 7th, 2024.
Extended the firewall Panorama root CA certificate which was previously set to expire on April 7th, 2024.
## PAN-236605
Fixed an issue where the configd process stopped
responding due to a deadlock related to rule-hit-count.
Fixed an issue where the configd process stopped responding due to a deadlock related to rule-hit-count.
## PAN-235385
@@ -45,17 +35,7 @@ Enhanced wifclient cloud connectivity redundancy.
## PAN-234929
Fixed an issue where tabs in the ACC such as
Network Activity
Threat Activity and Blocked
Activity did not display data when you applied a
Time filter of Last 15
Minutes, Last Hour,
Last 6 Hours, or Last 12
Hours, and the data that was displayed with the
Last 24 Hours filter was not accurate.
Reports that were run against summary logs also did not display
accurate results.
Fixed an issue where tabs in the **ACC** such as **Network Activity** **Threat Activity** and **Blocked Activity** did not display data when you applied a **Time** filter of **Last 15 Minutes**, **Last Hour**, **Last 6 Hours**, or **Last 12 Hours**, and the data that was displayed with the **Last 24 Hours** filter was not accurate. Reports that were run against summary logs also did not display accurate results.
## PAN-233957
@@ -63,8 +43,7 @@ accurate results.
PA-5450 firewalls only
```
Fixed an issue where the NAT
private pool was not used properly when enabling slot 6 DPC.
Fixed an issue where the NAT private pool was not used properly when enabling slot 6 DPC.
## PAN-233191
@@ -72,9 +51,7 @@ private pool was not used properly when enabling slot 6 DPC.
PA-5450 firewalls only
```
Fixed an issue where the Data
Processing Card (DPC) restarted due to path monitor failure after
QSFP28 disconnected from the Network Processing Card (NPC).
Fixed an issue where the Data Processing Card (DPC) restarted due to path monitor failure after QSFP28 disconnected from the Network Processing Card (NPC).
## PAN-232358
@@ -82,35 +59,24 @@ QSFP28 disconnected from the Network Processing Card (NPC).
PA-5450 firewalls only
```
Fixed an issue where the interface
on QSFP28 ports did not go down when the Tx cable was removed from
the QSFP28 module.
Fixed an issue where the interface on QSFP28 ports did not go down when the Tx cable was removed from the QSFP28 module.
## PAN-231771
Fixed an issue where the firewall issued /box/getserv/ requests with
PAN-OS 7.1.0 and did not take device certificates.
Fixed an issue where the firewall issued /box/getserv/ requests with PAN-OS 7.1.0 and did not take device certificates.
## PAN-231658
Fixed an issue where DNS resolution failed when interfaces were
configured as DHCP and a DNS server was provided via DHCP while also
statically configured with DNS servers.
Fixed an issue where DNS resolution failed when interfaces were configured as DHCP and a DNS server was provided via DHCP while also statically configured with DNS servers.
## PAN-231194
Fixed an issue where the firewall was unable to clear hints from the
disk.
Fixed an issue where the firewall was unable to clear hints from the disk.
## PAN-227568
When a device certificate is installed, renewed, or removed, the
firewall will reconnect to the WildFire cloud to use the newest
certificate.
When a device certificate is installed, renewed, or removed, the firewall will reconnect to the WildFire cloud to use the newest certificate.
## PAN-215576
Fixed an issue where the userID-Agent and
TS-Agent certificates were set to
expire on November 18, 2024. With this fix, the expiration date has
been extended to January 2032.
Fixed an issue where the userID-Agent and TS-Agent certificates were set to expire on November 18, 2024. With this fix, the expiration date has been extended to January 2032.