This commit is contained in:
aaron.axvig committed
1 parent
a404ee5df7
commit
10fb5719b5
10 files changed
+2135
No files matched your search
@@ -0,0 +1,296 @@
|
||||
<table class="table colsep rowsep table-striped">
|
||||
<!--cq:include script="../../common/tablestack.jsp" /-->
|
||||
|
||||
<colgroup>
|
||||
<col style="width: 25%" />
|
||||
<col style="width: 75%" />
|
||||
</colgroup>
|
||||
<thead class="thead">
|
||||
<tr class="row">
|
||||
<th class="entry">
|
||||
<div class="p">Issue ID</div>
|
||||
</th>
|
||||
<th class="entry">
|
||||
<div class="p">Description</div>
|
||||
</th>
|
||||
</tr>
|
||||
</thead>
|
||||
|
||||
<tbody class="tbody">
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-331387</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue where IPsec tunnels frequently went down due to high
|
||||
process memory utilization. With this fix, the system process now
|
||||
manages memory correctly, preventing tunnel instability.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-330196</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue where the firewall unexpectedly terminated operations
|
||||
and rebooted due to an internal software error.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-328770</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue where BGP Graceful Restart (GR) capability continued to
|
||||
be advertised to BGP peers after GR was disabled on a Logical Router
|
||||
configured with the Advanced Routing Engine, which caused peers to
|
||||
incorrectly believe the firewall supported GR. With this fix,
|
||||
disabling BGP GR on a Logical Router correctly removes the capability
|
||||
from BGP Open messages.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-325496</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
(<tt class="ph tt">KVM VM-Series firewalls only</tt>) Fixed an issue
|
||||
where ARP entries were incomplete after an upgrade to an affected
|
||||
release.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-324336</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue where GlobalProtect iOS users were unable to connect
|
||||
due to the firewall incorrectly reporting that the maximum number of
|
||||
users was exceeded, even when the actual number of active users was
|
||||
below the configured limit.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-323974</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue where you were unable to add logging drives to the
|
||||
firewall, and validation errors occurred when pushing configurations
|
||||
from Panorama.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-321937</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue where an expired SD-WAN license caused SD-WAN tunnels
|
||||
to become unavailable, which resulted in traffic interruptions. With
|
||||
this fix, the device provides logs and commit messages about expired
|
||||
licenses.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-321204</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue where FTP-DATA sessions did not match the installed
|
||||
predict session, which led to session termination in HA
|
||||
configurations.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-319343</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
(<tt class="ph tt">Prisma Access Gateways only</tt>) Fixed an issue
|
||||
where the global management plane stopped responding, which caused SSH
|
||||
and HTML disconnections, HIP database lookup failures, and
|
||||
significantly slower SCM commits. This occurred when egress IP allow
|
||||
listing was enabled in SCM and changes were made to EDLs.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-314873</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue where the firewall intermittently stopped forwarding
|
||||
traffic to the internet.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-312685</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue where committing a scheduled configuration push on
|
||||
Panorama caused the
|
||||
<a
|
||||
class="term"
|
||||
href="#"
|
||||
title=""
|
||||
data-scope=""
|
||||
data-format="dita"
|
||||
data-type=""
|
||||
target="_self"
|
||||
>configd</a
|
||||
>
|
||||
process to stop responding unexpectedly.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-311988</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
(<tt class="ph tt">Firewalls in FIPS mode only</tt>) Fixed decryption
|
||||
issues that occurred after an upgrade to an affected release.
|
||||
</div>
|
||||
<div class="p">
|
||||
To enable this fix, run the CLI command
|
||||
<span class="ph systemoutput"
|
||||
>debug dataplane set ssl-decrypt low-memory-throttle enable</span
|
||||
>.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-310699</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue where the firewall stripped the Authentication Key
|
||||
Identifier (AKID) from certificates using SSL decryption, which
|
||||
prevented clients from authenticating server certificates and resulted
|
||||
in decryption failures.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-310476</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
(<tt class="ph tt">Firewalls in HA configurations only</tt>) Fixed an
|
||||
issue where CPLD did not power cycle the firewall after internal
|
||||
packet path monitoring failures occurred, and both firewalls instead
|
||||
became simultaneously non-functional after a reboot.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-310263</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
(<tt class="ph tt">VM-Series firewalls only</tt>) Fixed an issue where
|
||||
enabling TLS1.3 in a decryption profile prevented access to websites.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-307933</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
(Panorama appliances in Log Collector mode only) Fixed an issue where
|
||||
the log collectors became unstable for an extended period of time when
|
||||
receiving large amounts of traffic.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-306225</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue on the firewall where the
|
||||
<a
|
||||
class="term"
|
||||
href="#"
|
||||
title=""
|
||||
data-scope=""
|
||||
data-format="dita"
|
||||
data-type=""
|
||||
target="_self"
|
||||
>sslmgr</a
|
||||
>
|
||||
process memory utilization continually increased due to memory
|
||||
fragmentation.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-301756</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue where ACC logs displayed a discrepancy in SSL traffic
|
||||
information between Panorama and the firewall. With this fix, the SSL
|
||||
traffic information in ACC logs now aligns correctly.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-299027</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
(<tt class="ph tt"
|
||||
>Panorama virtual appliances in Management Mode only</tt
|
||||
>) Fixed an issue where a maximum configuration size of 120 was
|
||||
incorrectly enforced instead of 150 MB.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-297880</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue where WildFire Analysis reports failed to load,
|
||||
displaying a
|
||||
<span class="ph uicontrol">500 Internal Server Error</span> when the
|
||||
system attempted to retrieve reports for certain files. With this fix,
|
||||
WildFire Analysis reports load as expected.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-282335</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue where firewalls in a cluster experienced approximately
|
||||
50% packet loss on IPSec NATT tunnels when tunnel acceleration was
|
||||
enabled.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<tr class="row rowsep">
|
||||
<td class="entry"><div class="p">PAN-248913</div></td>
|
||||
<td class="entry relcol">
|
||||
<div class="p">
|
||||
Fixed an issue where the Elasticsearch client certificate was not auto
|
||||
renewed, which caused it to enter a Red state, and logs were not
|
||||
displayed in Panorama.
|
||||
</div>
|
||||
</td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
Reference in new issue
Block a user