Revise PAN-OS 11.2 addressed issues

2026-04-13 14:56:21 -05:00
parent 19c7c5a6d3
commit 71f86eed34
84 changed files with 32057 additions and 236 deletions
@@ -30,11 +30,13 @@ Fixed an issue where the logrcvr process stopped responding due to an invalid SS

 ## PAN-287688

-Fixed an issue where the firewall failed to connect to the Palo Alto Networks update server when using a customized service route with the source interface as MGT.
+Fixed an issue where the firewall failed to connect to the Palo Alto Networks update server when using a customized service route with the source interface as **MGT**.

 ## PAN-279901

-Fixed an issue where the firewall dropped client hello packets when decryption was enabled, which prevented access to certain websites. This occurred when the client hello packet was truncated, the accumulation proxy assumed that the first packet contains at least 5 bytes, or out-of-order packets were waiting in L4 TCP.
+An issue was fixed where the firewall dropped fragmented TLS ClientHello packets, which blocked access to certain websites. This occurred because the packets arrived truncated, in varying sizes and orders, and the firewall's heuristics failed to handle them correctly.
+
+To enable this fix, run: debug dataplane set ssl-decrypt accumulate-client-hello disjoined yes

 ## PAN-268680

@@ -42,7 +44,7 @@ Fixed an issue where the configd process stopped responding when a configuration

 ## PAN-268522

-Fixed an issue where the firewall failed to connect to the update server with a customized service route when the source interface was set to MGT and the source address was set as IPv4.
+Fixed an issue where the firewall failed to connect to the update server with a customized service route when the source interface was set to **MGT** and the source address was set as IPv4.

 ## PAN-255914