Update PAN-OS 11.1 files

web/data/issues/PAN-OS/addressed/11.1.10-h4.md

@@ -34,7 +34,7 @@ Fixed an issue where the logrcvr process stopped responding due to memory alloca
 
 ## PAN-294488
 
-Fixed an issue where certificate data was missing in decryption logs for No decrypt policy rules and TLS1.2 traffic after upgrading, and the Subject Common Name, Issuer Common Name, Certificate Start Date, Certificate End Date, Certificate Serial Number, and Certificate Fingerprint fields were blank in the decryption logs.
+Fixed an issue where certificate data was missing in decryption logs for **No decrypt** policy rules and TLS1.2 traffic after upgrading, and the **Subject Common Name**, **Issuer Common Name**, **Certificate Start Date**, **Certificate End Date**, **Certificate Serial Number**, and **Certificate Fingerprint** fields were blank in the decryption logs.
 
 ## PAN-294436
 
@@ -172,7 +172,7 @@ Fixed an issue where the comm process stopped responding due to missing heartbea
 
 ## PAN-287688
 
-Fixed an issue where the firewall failed to connect to the Palo Alto Networks update server when using a customized service route with the source interface as MGT.
+Fixed an issue where the firewall failed to connect to the Palo Alto Networks update server when using a customized service route with the source interface as **MGT**.
 
 ## PAN-287611
 
@@ -200,7 +200,7 @@ Fixed an issue where the firewall double-freed shared memory when the shared mem
 
 ## PAN-286299
 
-Fixed an issue on firewalls running PAN-OS 11.1 releases where, after being offboarded from Panorama, the firewall XML configuration file retained template information from the previous Panorama configuration. As a result, when the firewall and its configuration were imported to another Panorama appliance, all configurations in the Network and Device tab became read-only.
+Fixed an issue on firewalls running PAN-OS 11.1 releases where, after being offboarded from Panorama, the firewall XML configuration file retained template information from the previous Panorama configuration. As a result, when the firewall and its configuration were imported to another Panorama appliance, all configurations in the **Network** and **Device** tab became read-only.
 
 ## PAN-286231
 
@@ -252,11 +252,11 @@ Fixed an issue where searching configuration logs for an audit_uuid did not retu
 
 ## PAN-281096
 
-Fixed an issue on HA clusters where, when link and path monitoring was configured and the failover condition was set to all, disconnecting and reconnecting monitored ethernet ports caused the firewall to switch to a nonfunctional role, which resulted in all interfaces except the HA interface going down.
+Fixed an issue on HA clusters where, when link and path monitoring was configured and the failover condition was set to **all**, disconnecting and reconnecting monitored ethernet ports caused the firewall to switch to a nonfunctional role, which resulted in all interfaces except the HA interface going down.
 
 ## PAN-279901
 
-Fixed an issue where the firewall dropped client hello packets when decryption was enabled, which prevented access to certain websites. This occurred when the client hello packet was truncated, the accumulation proxy assumed that the first packet contains at least 5 bytes, or out-of-order packets were waiting in L4 TCP.
+An issue was fixed where the firewall dropped fragmented TLS ClientHello packets, which blocked access to certain websites. This occurred because the packets arrived truncated, in varying sizes and orders, and the firewall's heuristics failed to handle them correctly.
 
 To enable this fix, run: debug dataplane set ssl-decrypt accumulate-client-hello disjoined yes
 
@@ -292,7 +292,7 @@ Fixed an issue on Panorama where the request batch license info CLI command disp
 
 ## PAN-271545
 
-Fixed an issue where, when the zone protection option anycast-source was enabled, IPv6 traffic with an interface ID of 0 was dropped even if the subnet was not locally configured on the firewall.
+Fixed an issue where, when the zone protection option **anycast-source** was enabled, IPv6 traffic with an interface ID of 0 was dropped even if the subnet was not locally configured on the firewall.
 
 ## PAN-269659
 
@@ -300,7 +300,7 @@ Fixed an issue on the firewall where you were unable to configure more than 500
 
 ## PAN-268522
 
-Fixed an issue where the firewall failed to connect to the update server with a customized service route when the source interface was set to MGT and the source address was set as IPv4.
+Fixed an issue where the firewall failed to connect to the update server with a customized service route when the source interface was set to **MGT** and the source address was set as IPv4.
 
 ## PAN-268002