aaron.axvig/firewallissues
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update PAN-OS 11.1 files

Browse Source
This commit is contained in:
aaron.axvig
2026-04-15 14:57:19 -05:00
parent 8a243e3d9c
commit 10f549ef2a
84 changed files with 3207 additions and 3509 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/data/issues/PAN-OS/addressed/11.1.4-h25.md
+15 -48
View File
@@ -6,82 +6,53 @@ version: 11.1.4-h25
## PAN-292261
Fixed an issue where the firewall repeatedly reported an unreachable
syslog server as back online when the
server remained unavailable. This resulted in misleading alternating
connection status messages in the system logs.
Fixed an issue where the firewall repeatedly reported an unreachable syslog server as back online when the server remained unavailable. This resulted in misleading alternating connection status messages in the system logs.
## PAN-287423
Fixed an issue where content loading issues occurred on IPv6 websites
due to the firewall incorrectly setting the IPv6 header flow label
to 0.
Fixed an issue where content loading issues occurred on IPv6 websites due to the firewall incorrectly setting the IPv6 header flow label to 0.
## PAN-286255
Fixed an issue where, when the firewall received an unexpected
termination request for SSL sessions, the dataplane experienced a
slow buffer resource leak.
Fixed an issue where, when the firewall received an unexpected termination request for SSL sessions, the dataplane experienced a slow buffer resource leak.
## PAN-282069
Fixed an issue on Panorama where Security policy rules were removed
from device groups when you cloned or edited Security policy rules
that used more than 63 characters.
Fixed an issue on Panorama where Security policy rules were removed from device groups when you cloned or edited Security policy rules that used more than 63 characters.
## PAN-280942
Fixed an issue where the logrcvr process stopped
responding.
Fixed an issue where the logrcvr process stopped responding.
## PAN-280698
Fixed an issue where the firewall removed the TCP timestamp from
client hello messages that did not fit in a single packet, which
resulted in connection issues.
Fixed an issue where the firewall removed the TCP timestamp from client hello messages that did not fit in a single packet, which resulted in connection issues.
## PAN-279901
An issue was fixed where the firewall dropped fragmented TLS
ClientHello packets, which blocked access to certain websites. This
occurred because the packets arrived truncated, in varying sizes and
orders, and the firewall's heuristics failed to handle them
correctly.
An issue was fixed where the firewall dropped fragmented TLS ClientHello packets, which blocked access to certain websites. This occurred because the packets arrived truncated, in varying sizes and orders, and the firewall's heuristics failed to handle them correctly.
To enable this fix, run: debug dataplane set ssl-decrypt
accumulate-client-hello disjoined yes.
To enable this fix, run: debug dataplane set ssl-decrypt accumulate-client-hello disjoined yes.
## PAN-273949
Fixed an issue where the firewall generated the following error
message in the snmpd logs:
pan_get_keystr_from_cryptod(pan_snmpinterface.c:181):
Key X2F1dGhfa2V5 import from cryptod failed.
Fixed an issue where the firewall generated the following error message in the snmpd logs: pan_get_keystr_from_cryptod(pan_snmpinterface.c:181): Key X2F1dGhfa2V5 import from cryptod failed.
## PAN-271273
Fixed an issue where dynamic update downloads failed when
IPv6 firewalling was enabled on the
firewall and both IPv4 and IPv6 were configured on the management
interface.
Fixed an issue where dynamic update downloads failed when **IPv6 firewalling** was enabled on the firewall and both IPv4 and IPv6 were configured on the management interface.
## PAN-270193
Fixed an issue where the Panorama management server changed its
certificate authority (CA) unexpectedly, which caused managed
firewalls to disconnect.
Fixed an issue where the Panorama management server changed its certificate authority (CA) unexpectedly, which caused managed firewalls to disconnect.
## PAN-268614
Fixed an issue on the web interface where, when all rules were
highlighted when a read-only admin user clicked the
Highlight Unused Rules checkbox.
Fixed an issue on the web interface where, when all rules were highlighted when a read-only admin user clicked the **Highlight Unused Rules** checkbox.
## PAN-265621
Fixed an issue where the restart option for
IPSec tunnels was greyed out when you attempted to restart the
tunnel from NetworkIPSec TunnelsIKE Info.
Fixed an issue where the **restart** option for IPSec tunnels was greyed out when you attempted to restart the tunnel from **Network** > **IPSec Tunnels** > **IKE Info**.
## PAN-260300
@@ -89,12 +60,8 @@ tunnel from NetworkIPSec TunnelsIKE Info.
PA-5410, PA-5420, PA-5430, PA-5440 and PA-5445 firewalls only
```
Fixed an issue related to the
all_pktproc process where DPC slot 3 stopped
responding.
Fixed an issue related to the all_pktproc process where DPC slot 3 stopped responding.
## PAN-259535
Fixed an issue where the firewall failed to boot up after running
power cycle tests due to ehmon process heartbeat
failures.
Fixed an issue where the firewall failed to boot up after running power cycle tests due to ehmon process heartbeat failures.