aaron.axvig/firewallissues
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add reference files

Browse Source
This commit is contained in:
aaron.axvig
2026-06-18 08:16:14 -05:00
parent c6e3095f26
commit 5202196f2d
8 changed files with 1487 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
reference/PAN-OS/addressed/11.1.13-h8.html
+442
View File
@@ -0,0 +1,442 @@
<table class="table colsep rowsep table-striped">
<!--cq:include script="../../common/tablestack.jsp" /-->
<colgroup>
<col style="width: 50%" />
<col style="width: 50%" />
</colgroup>
<thead class="thead" data-sticky-top="61.2" style="top: 61.2px">
<tr class="row rowsep">
<th class="entry">Issue ID</th>
<th class="entry">Description</th>
</tr>
</thead>
<tbody class="tbody">
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-321340</b></div>
</td>
<td class="entry relcol">
<div class="p">
(<tt class="ph tt">Firewalls in FIPS mode only</tt>) Fixed an issue
where GlobalProtect unexpectedly prompted for RADIUS authentication
instead of client certificate authentication due to an OSCP validation
error and subsequent CRL verification failure, which led to
certificates being marked as invalid.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-320598</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where internal and external DNS names did not resolve
when connected to a GlobalProtect gateway.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-319288</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where a DPC in Slot 4 restarted repeatedly, which
caused internal path monitoring failures and a failover event.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-318580</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where processes restarted and the firewall unexpectedly
rebooted when you configured a Security policy rule with
<span class="ph uicontrol">Source Device &gt; quarantine</span>.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-317755</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on Panorama where selective push operations failed when
plugin configurations included access-domain or log-collector
references.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-316556</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where a race condition between the session ager and
packet processing resulted in memory corruption and caused the
pan_task process to stop responding, which resulted in the firewall
becoming unresponsive
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-316120</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, after Advanced Routing was enabled, the firewall
advertised routes to internal BGP neighbors with the original external
BGP next-hop address.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-315337</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect throughput was reduced after an
upgrade.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-315314</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, when a push operation from Panorama to the
firewall failed, accounting logs stopped forwarding.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-315160</b></div>
</td>
<td class="entry relcol">
<div class="p">
(<tt class="ph tt">PA-7500 firewalls only</tt>) Fixed an issue where
internal path monitoring logs incorrectly reported internal path
monitoring failures when they did not occur.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-314752</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on Panorama where, after removing a scheduled
configuration push, Panorama still initiated the push at its
previously scheduled time.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-314623</b></div>
</td>
<td class="entry relcol">
<div class="p">
(<tt class="ph tt"
>Firewalls in active/passive HA configurations only</tt
>) Fixed an issue where, after a failover, routing information within
OSPF protocol was not correctly translated or propagated, which
affected network path convergence and FRR capabilities.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-314385</b></div>
</td>
<td class="entry relcol">
<div class="p">
(<tt class="ph tt">Firewalls in active/passive HA clusters only</tt>)
Fixed an issue where high dataplane CPU usage occurred and traffic
offloading decreased when a failover occurred from the active firewall
to the passive firewall, and then back to the active firewall.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-313827</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where a memory leak occurred related to the
<span class="ph systemoutput">reportd</span> process when custom
reports were run via API.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-313700</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where an unexpected reboot occurred when Inline Cloud
Analysis was enabled in an Anti-Spyware and Vulnerability profile.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-313606</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where Panorama pushed commits took longer than expected
to complete without displaying an error message when committing due to
slow cloud-app compilation.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-313443</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where firewalls acting as an accumulation proxy sent a
server hello with an earlier TCP timestamp value than a preceding ACK
packet, which prevented successful session establishment. This
occurred when the client hello messages were split across multiple
network segments.
</div>
<div class="p">
To use this fix, run the CLI command
<span class="ph systemoutput"
>debug dataplane set ssl-decrypt accumulate-client-hello ts-relay
yes</span
>.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-313036</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the firewall dataplane continuously accumulated
packets in the <span class="ph systemoutput">ctd_pkt_queue</span> and
packet buffers, which caused resource exhaustion and prematurely
terminated sessions.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-311658</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the
<a
class="term"
href="#"
title=""
data-scope=""
data-format="dita"
data-type=""
target="_self"
>reportd</a
>
process stopped responding, which caused the firewall to reboot.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-311098</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where firewalls entered a nonfunctional state due to L7
running out of resources due to a high volume of traffic.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-309853</b></div>
</td>
<td class="entry relcol">
<div class="p">
(<tt class="ph tt">Firewalls with FIPS-CC enabled only</tt>) Fixed an
issue where, when attempting to make changes to the GlobalProtect
portal, an error message was displayed and configuration updates
failed.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-308775</b></div>
</td>
<td class="entry relcol">
<div class="p">
(<tt class="ph tt">Firewalls in active/passive configurations only</tt
>) Fixed an issue where NTP status intermittently showed as rejected
on the active firewall, which prevented the firewalls from
synchronizing time.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-308668</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on Prisma Access Remote Network firewalls where high
CPU utilization caused slowness and command timeouts.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-308444</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where pushing multiple policy rules failed when the
policy rules contained a large number of dynamic address object groups
or user groups.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-297819</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the firewall was unable to send device telemetry
files to Cortex Data Lake due to the firewall receiving an invalid
upload token.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-295082</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on the Panorama web interface where you were unable to
delete or change a logical router for tunnel, SD-WAN, VLAN, or
loopback interfaces under a template.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-293142</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where firewall components became unresponsive during
sustained operation.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-289460</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the timestamp value in SNMPv3 trap headers was
incorrect.
</div>
<div class="p">
To use this fix, run the CLI command
<span class="ph systemoutput"
>debug log-receiver enginetime-from-snmptime yes</span
>.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-282335</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where firewalls in a cluster experienced approximately
50% packet loss on IPSec NATT tunnels when tunnel acceleration was
enabled.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-240066</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed a duplicate MAC address issue where an ethernet interface sent
out Gratuitous ARP (GARP) messages for an IP address that was not
configured on it.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-213491</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the management CPU was high, which caused the web
interface to be slower than expected.
</div>
</td>
</tr>
</tbody>
</table>