Add PAN-OS 11.2 reference files
This commit is contained in:
aaron.axvig committed
1 parent
10fb5719b5
commit
15a105ad16
7 files changed
+6569
No files matched your search
@@ -0,0 +1,234 @@
|
|||||||
|
<table class="table colsep rowsep table-striped">
|
||||||
|
<!--cq:include script="../../common/tablestack.jsp" /-->
|
||||||
|
|
||||||
|
<colgroup>
|
||||||
|
<col style="width: 25%" />
|
||||||
|
<col style="width: 75%" />
|
||||||
|
</colgroup>
|
||||||
|
<thead class="thead">
|
||||||
|
<tr class="row">
|
||||||
|
<th class="entry">
|
||||||
|
<div class="p">Issue ID</div>
|
||||||
|
</th>
|
||||||
|
<th class="entry">
|
||||||
|
<div class="p">Description</div>
|
||||||
|
</th>
|
||||||
|
</tr>
|
||||||
|
</thead>
|
||||||
|
|
||||||
|
<tbody class="tbody">
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-333894</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where communication with Microsoft Azure services was
|
||||||
|
disrupted, which resulted in application outages. This occurred when
|
||||||
|
firewalls dropped SYN-ACK packets that were part of a SYN-ACK cookie
|
||||||
|
mechanism activated by Azure's DDoS mitigation. With this fix,
|
||||||
|
firewalls now maintain connectivity during such traffic events.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-327266</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where IP addresses configured for Source Address
|
||||||
|
Exclusions in a Zone Protection Profile within a template stack did
|
||||||
|
not save correctly. With this fix, the IP addresses save as expected.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-326734</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where a Security policy rule configured in the Shared
|
||||||
|
device group on Panorama was not displayed in the web interface for a
|
||||||
|
child device group, which caused a discrepancy between the displayed
|
||||||
|
configuration and the actual deployed configuration on the associated
|
||||||
|
device. With this fix, the user interface accurately reflects the
|
||||||
|
deployed security policy rules.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-326056</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where ACE applications did not match the correct
|
||||||
|
Security policy rules when the service was not set to
|
||||||
|
<span class="ph uicontrol">Application Default</span> after an
|
||||||
|
upgrade, which caused traffic to be incorrectly denied.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-321937</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where an expired SD-WAN license caused SD-WAN tunnels
|
||||||
|
to become unavailable, which resulted in traffic interruptions. With
|
||||||
|
this fix, the device provides logs and commit messages about expired
|
||||||
|
licenses.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-319343</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
(<tt class="ph tt">Prisma Access Gateways only</tt>) Fixed an issue
|
||||||
|
where the global management plane stopped responding, which caused SSH
|
||||||
|
and HTML disconnections, HIP database lookup failures, and
|
||||||
|
significantly slower SCM commits. This occurred when egress IP allow
|
||||||
|
listing was enabled in SCM and changes were made to EDLs.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-316721</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where multiple EDL fetches were queued and did not
|
||||||
|
complete.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-312870</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue on Panorama where
|
||||||
|
<span class="ph uicontrol">Apps Seen</span> was not updated in
|
||||||
|
Security policy rules even when the firewall correclty recorded the
|
||||||
|
**Last App Seen* timestamp and Panorama received monitor logs.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-312685</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where committing a scheduled configuration push on
|
||||||
|
Panorama caused the
|
||||||
|
<a
|
||||||
|
class="term"
|
||||||
|
href="#"
|
||||||
|
title=""
|
||||||
|
data-scope=""
|
||||||
|
data-format="dita"
|
||||||
|
data-type=""
|
||||||
|
target="_self"
|
||||||
|
>configd</a
|
||||||
|
>
|
||||||
|
process to stop responding unexpectedly.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-309960</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where a memory leak related to the
|
||||||
|
<a
|
||||||
|
class="term"
|
||||||
|
href="#"
|
||||||
|
title=""
|
||||||
|
data-scope=""
|
||||||
|
data-format="dita"
|
||||||
|
data-type=""
|
||||||
|
target="_self"
|
||||||
|
>useridd</a
|
||||||
|
>
|
||||||
|
process on the passive device led to an OOM condition.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-308668</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue on Prisma Access Remote Network firewalls where high
|
||||||
|
CPU utilization caused slowness and command timeouts.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-307933</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
(Panorama appliances in Log Collector mode only) Fixed an issue where
|
||||||
|
the log collectors became unstable for an extended period of time when
|
||||||
|
receiving large amounts of traffic.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-296184</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where the
|
||||||
|
<a
|
||||||
|
class="term"
|
||||||
|
href="#"
|
||||||
|
title=""
|
||||||
|
data-scope=""
|
||||||
|
data-format="dita"
|
||||||
|
data-type=""
|
||||||
|
target="_self"
|
||||||
|
>useridd</a
|
||||||
|
>
|
||||||
|
process stopped responding during user-id-agent configuration when the
|
||||||
|
SSL context was not properly initialized to NULL after being freed.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-295095</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where, when you used a syslog forwarding profile with
|
||||||
|
the CEF format, an additional string was appended to the end of the
|
||||||
|
log message when viewing the log entry from the Universal Forwarder
|
||||||
|
directory.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-291984</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where SSH/SFTP traffic was intermittently blocked by
|
||||||
|
URL filtering due to the firewall incorrectly applying URL categories
|
||||||
|
from previous sessions.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-285862</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where repeated unexpected terminations of a system
|
||||||
|
component would cause the Data Plane to restart. With this fix, the
|
||||||
|
Data Plane maintained stability.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
</tbody>
|
||||||
|
</table>
|
||||||
@@ -0,0 +1,197 @@
|
|||||||
|
<table class="table colsep rowsep table-striped">
|
||||||
|
<!--cq:include script="../../common/tablestack.jsp" /-->
|
||||||
|
|
||||||
|
<colgroup>
|
||||||
|
<col style="width: 25%" />
|
||||||
|
<col style="width: 75%" />
|
||||||
|
</colgroup>
|
||||||
|
<thead class="thead">
|
||||||
|
<tr class="row">
|
||||||
|
<th class="entry">
|
||||||
|
<div class="p">Issue ID</div>
|
||||||
|
</th>
|
||||||
|
<th class="entry">
|
||||||
|
<div class="p">Description</div>
|
||||||
|
</th>
|
||||||
|
</tr>
|
||||||
|
</thead>
|
||||||
|
|
||||||
|
<tbody class="tbody">
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-329834</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where a memory leak associated with some display CLI
|
||||||
|
commands caused instability.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-329698</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
(<tt class="ph tt">OCTEON, MIPS, platforms only</tt>) Fixed an issue
|
||||||
|
where the dataplane became unresponsive. With this fix, the dataplane
|
||||||
|
operates stably.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-329180</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where Panorama did not automatically resume syslog
|
||||||
|
forwarding over TCP after the syslog server became unavailable or was
|
||||||
|
restarted.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-327460</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where a
|
||||||
|
<span class="ph uicontrol">Commit and Push</span> operation on
|
||||||
|
Panorama did not successfully push configuration changes to Prisma
|
||||||
|
Access endpoints. This occurred when the system reported that not all
|
||||||
|
commit jobs were triggered. With this fix,
|
||||||
|
<span class="ph uicontrol">Commit and Push</span> operations now
|
||||||
|
correctly apply configurations to Prisma Access.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-326705</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where high CPU utilization occurred on one of the CPU
|
||||||
|
cores.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-325002</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
(<tt class="ph tt"
|
||||||
|
>Google Cloud NGFW Enterprise VM-Series firewalls only</tt
|
||||||
|
>) Fixed an issue where the HTTP2 threat logs did not include VPC ID,
|
||||||
|
Security_key, and Endpoint ID.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-323485</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where multicast radio RTP based traffic was dropped
|
||||||
|
after an upgrade when the firewall performed Cloud Inline inspection,
|
||||||
|
which led to an exceeded session queue for Cloud Threat Detection.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-317648</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
(<tt class="ph tt"
|
||||||
|
>PA-5450 firewalls and PA-7000 Series firewalls with 100G NPCs
|
||||||
|
only</tt
|
||||||
|
>) Fixed an issue where intermittent packet loss occurred when
|
||||||
|
traversing the dataplane after upgrading the firewall. This occurred
|
||||||
|
when a dataplane HA interface was configured in an environment where
|
||||||
|
Slot 1 was unpopulated, which resulted in a wildcard entry being
|
||||||
|
created within the QMAP table.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-317068</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue on the Panorama web interface where you were able to
|
||||||
|
enable IPv6 for IKE gateways and IPSec tunnels even when IPv6 WAN was
|
||||||
|
disabled, which resulted in an invalid configuration. To utilize this
|
||||||
|
fix, upgrade to the latest Panorama plugin.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-316721</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where multiple EDL fetches were queued and did not
|
||||||
|
complete.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-314776</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where the
|
||||||
|
<a
|
||||||
|
class="term"
|
||||||
|
href="#"
|
||||||
|
title=""
|
||||||
|
data-scope=""
|
||||||
|
data-format="dita"
|
||||||
|
data-type=""
|
||||||
|
target="_self"
|
||||||
|
>configd</a
|
||||||
|
>
|
||||||
|
process stopped responding after pushing configuration changes from
|
||||||
|
Panorama to the firewall.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-314624</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where the
|
||||||
|
<span class="ph systemoutput">useridd</span> process became
|
||||||
|
unresponsive and restarted when attempting to dump the Host
|
||||||
|
Information Profile (HIP) database via CLI while the system was
|
||||||
|
actively processing HIP reports. This was caused by a lock contention.
|
||||||
|
With this fix, the process now operates as expected under these
|
||||||
|
conditions.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-313827</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where a memory leak occurred related to the
|
||||||
|
<span class="ph systemoutput">reportd</span> process when custom
|
||||||
|
reports were run via API.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-310736</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where importing a profile that included a source
|
||||||
|
address would not correctly display the source address on the policy
|
||||||
|
page. With this fix, the source address now displays as expected after
|
||||||
|
profile import.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
</tbody>
|
||||||
|
</table>
|
||||||
@@ -0,0 +1,182 @@
|
|||||||
|
<table class="table colsep rowsep table-striped">
|
||||||
|
<!--cq:include script="../../common/tablestack.jsp" /-->
|
||||||
|
|
||||||
|
<colgroup>
|
||||||
|
<col style="width: 25%" />
|
||||||
|
<col style="width: 75%" />
|
||||||
|
</colgroup>
|
||||||
|
<thead class="thead">
|
||||||
|
<tr class="row">
|
||||||
|
<th class="entry">
|
||||||
|
<div class="p">Issue ID</div>
|
||||||
|
</th>
|
||||||
|
<th class="entry">
|
||||||
|
<div class="p">Description</div>
|
||||||
|
</th>
|
||||||
|
</tr>
|
||||||
|
</thead>
|
||||||
|
|
||||||
|
<tbody class="tbody">
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-333894</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where communication with Microsoft Azure services was
|
||||||
|
disrupted, which resulted in application outages. This occurred when
|
||||||
|
firewalls dropped SYN-ACK packets that were part of a SYN-ACK cookie
|
||||||
|
mechanism activated by Azure's DDoS mitigation. With this fix,
|
||||||
|
firewalls now maintain connectivity during such traffic events.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-329637</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where the push scope window did not display the target
|
||||||
|
devices when attempting to push configurations from Panorama, which
|
||||||
|
required manual selection of templates or device groups. With this
|
||||||
|
fix, the push scope window now correctly populates with the intended
|
||||||
|
push scope.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-327266</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where IP addresses configured for Source Address
|
||||||
|
Exclusions in a Zone Protection Profile within a template stack did
|
||||||
|
not save correctly. With this fix, the IP addresses save as expected.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-326734</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where a Security policy rule configured in the Shared
|
||||||
|
device group on Panorama was not displayed in the web interface for a
|
||||||
|
child device group, which caused a discrepancy between the displayed
|
||||||
|
configuration and the actual deployed configuration on the associated
|
||||||
|
device. With this fix, the user interface accurately reflects the
|
||||||
|
deployed security policy rules.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-326056</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where ACE applications did not match the correct
|
||||||
|
Security policy rules when the service was not set to
|
||||||
|
<span class="ph uicontrol">Application Default</span> after an
|
||||||
|
upgrade, which caused traffic to be incorrectly denied.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-321937</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where an expired SD-WAN license caused SD-WAN tunnels
|
||||||
|
to become unavailable, which resulted in traffic interruptions. With
|
||||||
|
this fix, the device provides logs and commit messages about expired
|
||||||
|
licenses.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-319343</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
(<tt class="ph tt">Prisma Access Gateways only</tt>) Fixed an issue
|
||||||
|
where the global management plane stopped responding, which caused SSH
|
||||||
|
and HTML disconnections, HIP database lookup failures, and
|
||||||
|
significantly slower SCM commits. This occurred when egress IP allow
|
||||||
|
listing was enabled in SCM and changes were made to EDLs.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-313606</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where Panorama pushed commits took longer than expected
|
||||||
|
to complete without displaying an error message when committing due to
|
||||||
|
slow cloud-app compilation.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-312685</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where committing a scheduled configuration push on
|
||||||
|
Panorama caused the
|
||||||
|
<a
|
||||||
|
class="term"
|
||||||
|
href="#"
|
||||||
|
title=""
|
||||||
|
data-scope=""
|
||||||
|
data-format="dita"
|
||||||
|
data-type=""
|
||||||
|
target="_self"
|
||||||
|
>configd</a
|
||||||
|
>
|
||||||
|
process to stop responding unexpectedly.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-309960</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where a memory leak related to the
|
||||||
|
<a
|
||||||
|
class="term"
|
||||||
|
href="#"
|
||||||
|
title=""
|
||||||
|
data-scope=""
|
||||||
|
data-format="dita"
|
||||||
|
data-type=""
|
||||||
|
target="_self"
|
||||||
|
>useridd</a
|
||||||
|
>
|
||||||
|
process on the passive device led to an OOM condition.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-307933</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
(Panorama appliances in Log Collector mode only) Fixed an issue where
|
||||||
|
the log collectors became unstable for an extended period of time when
|
||||||
|
receiving large amounts of traffic.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-285862</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where repeated unexpected terminations of a system
|
||||||
|
component would cause the Data Plane to restart. With this fix, the
|
||||||
|
Data Plane maintained stability.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
</tbody>
|
||||||
|
</table>
|
||||||
File diff suppressed because it is too large.
Load diff
@@ -0,0 +1,55 @@
|
|||||||
|
<table class="table colsep rowsep table-striped">
|
||||||
|
<!--cq:include script="../../common/tablestack.jsp" /-->
|
||||||
|
|
||||||
|
<colgroup>
|
||||||
|
<col style="width: 25%" />
|
||||||
|
<col style="width: 75%" />
|
||||||
|
</colgroup>
|
||||||
|
<thead class="thead">
|
||||||
|
<tr class="row">
|
||||||
|
<th class="entry">
|
||||||
|
<div class="p">Issue ID</div>
|
||||||
|
</th>
|
||||||
|
<th class="entry">
|
||||||
|
<div class="p">Description</div>
|
||||||
|
</th>
|
||||||
|
</tr>
|
||||||
|
</thead>
|
||||||
|
|
||||||
|
<tbody class="tbody">
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">—</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixes were made to address the following CVEs:
|
||||||
|
<ul id="pan_os_11_2_4_h21_addressed_issues_ul-d2c_441_nkc" class="ul">
|
||||||
|
<li class="li">
|
||||||
|
<a
|
||||||
|
class="xref"
|
||||||
|
href="https://security.paloaltonetworks.com/CVE-2026-0310"
|
||||||
|
title=""
|
||||||
|
data-scope="external"
|
||||||
|
data-format="html"
|
||||||
|
data-type=""
|
||||||
|
target="_blank"
|
||||||
|
>CVE-2026-0310</a
|
||||||
|
>
|
||||||
|
</li>
|
||||||
|
<li class="li">
|
||||||
|
<a
|
||||||
|
class="xref"
|
||||||
|
href="https://security.paloaltonetworks.com/CVE-2026-0309"
|
||||||
|
title=""
|
||||||
|
data-scope="external"
|
||||||
|
data-format="html"
|
||||||
|
data-type=""
|
||||||
|
target="_blank"
|
||||||
|
>CVE-2026-0309</a
|
||||||
|
>
|
||||||
|
</li>
|
||||||
|
</ul>
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
</tbody>
|
||||||
|
</table>
|
||||||
@@ -0,0 +1,64 @@
|
|||||||
|
<table class="table colsep rowsep table-striped">
|
||||||
|
<!--cq:include script="../../common/tablestack.jsp" /-->
|
||||||
|
|
||||||
|
<colgroup>
|
||||||
|
<col style="width: 25%" />
|
||||||
|
<col style="width: 75%" />
|
||||||
|
</colgroup>
|
||||||
|
<thead class="thead">
|
||||||
|
<tr class="row">
|
||||||
|
<th class="entry">
|
||||||
|
<div class="p">Issue ID</div>
|
||||||
|
</th>
|
||||||
|
<th class="entry">
|
||||||
|
<div class="p">Description</div>
|
||||||
|
</th>
|
||||||
|
</tr>
|
||||||
|
</thead>
|
||||||
|
|
||||||
|
<tbody class="tbody">
|
||||||
|
<tr class="row">
|
||||||
|
<td class="entry">
|
||||||
|
<div class="p"><b class="ph b">—</b></div>
|
||||||
|
</td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixes were made to address
|
||||||
|
<a
|
||||||
|
class="xref"
|
||||||
|
href="https://security-stg.paloaltonetworks.com/CVE-2026-0273"
|
||||||
|
title=""
|
||||||
|
data-scope="external"
|
||||||
|
data-format="html"
|
||||||
|
data-type=""
|
||||||
|
target="_blank"
|
||||||
|
>CVE-2026-0273</a
|
||||||
|
>
|
||||||
|
and
|
||||||
|
<a
|
||||||
|
class="xref"
|
||||||
|
href="https://security-stg.paloaltonetworks.com/CVE-2026-0272"
|
||||||
|
title=""
|
||||||
|
data-scope="external"
|
||||||
|
data-format="html"
|
||||||
|
data-type=""
|
||||||
|
target="_blank"
|
||||||
|
>CVE-2026-0272</a
|
||||||
|
>.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row">
|
||||||
|
<td class="entry">
|
||||||
|
<div class="p"><b class="ph b">PAN-313828</b></div>
|
||||||
|
</td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where the firewall did not forward traffic due to
|
||||||
|
memory issues on a forwarding component.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
</tbody>
|
||||||
|
</table>
|
||||||
@@ -0,0 +1,250 @@
|
|||||||
|
<table class="table colsep rowsep table-striped">
|
||||||
|
<!--cq:include script="../../common/tablestack.jsp" /-->
|
||||||
|
|
||||||
|
<colgroup>
|
||||||
|
<col style="width: 25%" />
|
||||||
|
<col style="width: 75%" />
|
||||||
|
</colgroup>
|
||||||
|
<thead class="thead">
|
||||||
|
<tr class="row">
|
||||||
|
<th class="entry">
|
||||||
|
<div class="p">Issue ID</div>
|
||||||
|
</th>
|
||||||
|
<th class="entry">
|
||||||
|
<div class="p">Description</div>
|
||||||
|
</th>
|
||||||
|
</tr>
|
||||||
|
</thead>
|
||||||
|
|
||||||
|
<tbody class="tbody">
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry">
|
||||||
|
<div class="p">—</div>
|
||||||
|
</td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixes were made to address the following CVEs:
|
||||||
|
<ul id="pan_os_11_2_7_h20_addressed_issues_ul-d2c_441_nkc" class="ul">
|
||||||
|
<li class="li">
|
||||||
|
<a
|
||||||
|
class="xref"
|
||||||
|
href="https://security.paloaltonetworks.com/CVE-2026-0310"
|
||||||
|
title=""
|
||||||
|
data-scope="external"
|
||||||
|
data-format="html"
|
||||||
|
data-type=""
|
||||||
|
target="_blank"
|
||||||
|
>CVE-2026-0310</a
|
||||||
|
>
|
||||||
|
</li>
|
||||||
|
<li class="li">
|
||||||
|
<a
|
||||||
|
class="xref"
|
||||||
|
href="https://security.paloaltonetworks.com/CVE-2026-0309"
|
||||||
|
title=""
|
||||||
|
data-scope="external"
|
||||||
|
data-format="html"
|
||||||
|
data-type=""
|
||||||
|
target="_blank"
|
||||||
|
>CVE-2026-0309</a
|
||||||
|
>
|
||||||
|
</li>
|
||||||
|
</ul>
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-330016</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where enabling App Acceleration resulted in
|
||||||
|
connectivity disruption for GlobalProtect users and branches connected
|
||||||
|
through ION devices, which prevented access to applications. With this
|
||||||
|
fix, App Acceleration functions as expected without causing
|
||||||
|
connectivity issues.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-326734</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where a Security policy rule configured in the Shared
|
||||||
|
device group on Panorama was not displayed in the web interface for a
|
||||||
|
child device group, which caused a discrepancy between the displayed
|
||||||
|
configuration and the actual deployed configuration on the associated
|
||||||
|
device. With this fix, the user interface accurately reflects the
|
||||||
|
deployed security policy rules.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-326056</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where ACE applications did not match the correct
|
||||||
|
Security policy rules when the service was not set to
|
||||||
|
<span class="ph uicontrol">Application Default</span> after an
|
||||||
|
upgrade, which caused traffic to be incorrectly denied.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-320324</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where incorrect source region information appeared in
|
||||||
|
GlobalProtect logs, which occurred because the location service lookup
|
||||||
|
did not consistently return region information for public IP
|
||||||
|
addresses. With this fix, accurate source region information is
|
||||||
|
consistently displayed.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-319343</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
(<tt class="ph tt">Prisma Access Gateways only</tt>) Fixed an issue
|
||||||
|
where the global management plane stopped responding, which caused SSH
|
||||||
|
and HTML disconnections, HIP database lookup failures, and
|
||||||
|
significantly slower SCM commits. This occurred when egress IP allow
|
||||||
|
listing was enabled in SCM and changes were made to EDLs.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-316721</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where multiple EDL fetches were queued and did not
|
||||||
|
complete.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-312870</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue on Panorama where
|
||||||
|
<span class="ph uicontrol">Apps Seen</span> was not updated in
|
||||||
|
Security policy rules even when the firewall correclty recorded the
|
||||||
|
**Last App Seen* timestamp and Panorama received monitor logs.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-309960</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where a memory leak related to the
|
||||||
|
<a
|
||||||
|
class="term"
|
||||||
|
href="#"
|
||||||
|
title=""
|
||||||
|
data-scope=""
|
||||||
|
data-format="dita"
|
||||||
|
data-type=""
|
||||||
|
target="_self"
|
||||||
|
>useridd</a
|
||||||
|
>
|
||||||
|
process on the passive device led to an OOM condition.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-308668</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue on Prisma Access Remote Network firewalls where high
|
||||||
|
CPU utilization caused slowness and command timeouts.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-307933</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
(Panorama appliances in Log Collector mode only) Fixed an issue where
|
||||||
|
the log collectors became unstable for an extended period of time when
|
||||||
|
receiving large amounts of traffic.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-296184</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where the
|
||||||
|
<a
|
||||||
|
class="term"
|
||||||
|
href="#"
|
||||||
|
title=""
|
||||||
|
data-scope=""
|
||||||
|
data-format="dita"
|
||||||
|
data-type=""
|
||||||
|
target="_self"
|
||||||
|
>useridd</a
|
||||||
|
>
|
||||||
|
process stopped responding during user-id-agent configuration when the
|
||||||
|
SSL context was not properly initialized to NULL after being freed.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-295095</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where, when you used a syslog forwarding profile with
|
||||||
|
the CEF format, an additional string was appended to the end of the
|
||||||
|
log message when viewing the log entry from the Universal Forwarder
|
||||||
|
directory.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-291984</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where SSH/SFTP traffic was intermittently blocked by
|
||||||
|
URL filtering due to the firewall incorrectly applying URL categories
|
||||||
|
from previous sessions.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-289652</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue related to external URL lists where pushing
|
||||||
|
configuration changes from Panorama failed.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
|
||||||
|
<tr class="row rowsep">
|
||||||
|
<td class="entry"><div class="p">PAN-285862</div></td>
|
||||||
|
<td class="entry relcol">
|
||||||
|
<div class="p">
|
||||||
|
Fixed an issue where repeated unexpected terminations of a system
|
||||||
|
component would cause the Data Plane to restart. With this fix, the
|
||||||
|
Data Plane maintained stability.
|
||||||
|
</div>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
</tbody>
|
||||||
|
</table>
|
||||||
Reference in new issue
Block a user