Remove dates from issue filenames
This commit is contained in:
@@ -0,0 +1,866 @@
|
||||
---
|
||||
type: Addressed
|
||||
product: PAN-OS
|
||||
version: 11.1.3
|
||||
---
|
||||
|
||||
## PAN-251013
|
||||
|
||||
Fixed an issue on the web interface where the Virtual
|
||||
Router and Virtual System
|
||||
configurations for the template incorrectly showed as
|
||||
none.
|
||||
|
||||
## PAN-250686
|
||||
|
||||
Fixed an issue where selective push operations did not work when more
|
||||
than one admin user simultaneously performed changes and partial
|
||||
commits on Panorama.
|
||||
|
||||
## PAN-249808
|
||||
|
||||
Fixed an issue where the configd process stopped
|
||||
responding when performing multi-device group pushes via XML
|
||||
API.
|
||||
|
||||
## PAN-249597
|
||||
|
||||
Fixed an issue where the Policy page on the
|
||||
Panorama web interface was slower than expected when a device group
|
||||
had a large number of managed devices.
|
||||
|
||||
## PAN-249019
|
||||
|
||||
Fixed an issue where the all_pktproc process stopped
|
||||
responding, which caused the firewall to become unresponsive.
|
||||
|
||||
## PAN-248748
|
||||
|
||||
Fixed an issue that caused the dataplane to stop responding when
|
||||
running a packet diagnostic with Jumbo frames enabled.
|
||||
|
||||
## PAN-248105
|
||||
|
||||
Fixed an issue where the GlobalProtect SSL VPN tunnel immediately
|
||||
disconnected due to a keep-alive timeout.
|
||||
|
||||
## PAN-247403
|
||||
|
||||
```caveat
|
||||
Panorama virtual appliances only
|
||||
```
|
||||
|
||||
Fixed an issue where the
|
||||
push scope CLI command took longer than expected, which caused the
|
||||
web interface to be slow.
|
||||
|
||||
## PAN-246707
|
||||
|
||||
Fixed an issue where failover was not triggered when multiple
|
||||
processes stopped responding.
|
||||
|
||||
## PAN-246420
|
||||
|
||||
```caveat
|
||||
PA-5450 Series firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where the
|
||||
firewall rebooted unexpectedly during an upgrade.
|
||||
|
||||
## PAN-246215
|
||||
|
||||
Fixed an issue where the sleep time for a suspended
|
||||
pan_task process caused configuration and policy
|
||||
updates to be blocked.
|
||||
|
||||
## PAN-245701
|
||||
|
||||
Fixed an issue where the returned values to SNMP requests for data
|
||||
port statistics were incorrect.
|
||||
|
||||
## PAN-245690
|
||||
|
||||
Fixed an issue where the Managed Collectors health status on Panorama
|
||||
displayed as empty.
|
||||
|
||||
## PAN-245428
|
||||
|
||||
Fixed an issue where FIB entries aged out and were incorrectly
|
||||
removed after an HA failover event.
|
||||
|
||||
## PAN-245387
|
||||
|
||||
Fixed an issue where selective push failed intermittently due to
|
||||
schema validation or bad encryption errors.
|
||||
|
||||
## PAN-245041
|
||||
|
||||
Fixed an issue where the WF-500 appliance returned an error verdict
|
||||
for every sample in FIPS mode.
|
||||
|
||||
## PAN-244907
|
||||
|
||||
```caveat
|
||||
PA-3400, PA-5400, and PA-1400 Series firewalls only
|
||||
```
|
||||
|
||||
Fixed
|
||||
an issue where virtual wire ports did not go down when moving from
|
||||
an active state to a suspended state.
|
||||
|
||||
## PAN-244894
|
||||
|
||||
Fixed an issue where turning off mprelay logging caused
|
||||
mprelay heartbeat failure.
|
||||
|
||||
## PAN-244836
|
||||
|
||||
A knob was introduced to toggle the default behavior of BGP in the
|
||||
Advanced Routing stack to not suppress duplicate updates. By
|
||||
default, the prefix updates are suppressed for optimization.
|
||||
|
||||
## PAN-244648
|
||||
|
||||
Fixed an issue where, when FIPS was enabled in maintenance mode, the
|
||||
firewall rebooted and returned to maintenance mode.
|
||||
|
||||
## PAN-244625
|
||||
|
||||
```caveat
|
||||
VM-Series firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where incorrect
|
||||
virtual MAC addresses were used in interfaces.
|
||||
|
||||
## PAN-244622
|
||||
|
||||
Fixed an issue where FIB re-push did not work with Advanced Routing
|
||||
enabled.
|
||||
|
||||
## PAN-244548
|
||||
|
||||
Fixed an issue where ECMP sessions changed destination MAC addresses
|
||||
mid-session, which caused connections to be reset.
|
||||
|
||||
## PAN-244493
|
||||
|
||||
Fixed a memory limitation with mapping subinterfaces to VPCE
|
||||
endpoints for GCP IPS, Amazon Web Services (AWS) integration with
|
||||
GWLB, and NSX service chain mapping.
|
||||
|
||||
## PAN-244227
|
||||
|
||||
Fixed an issue where inconsistent FIB entries across the dataplane
|
||||
were not detected.
|
||||
|
||||
## PAN-244013
|
||||
|
||||
Fixed an issue where the web interface did not display newly added
|
||||
Anti-Spyware signatures or Vulnerability Signatures.
|
||||
|
||||
## PAN-243463
|
||||
|
||||
Fixed an issue where high Enhanced Application Log traffic used
|
||||
excess system resources and caused processes to not work.
|
||||
|
||||
## PAN-242027
|
||||
|
||||
Fixed an issue where the all-task process repeatedly
|
||||
restarted during memory allocation failures.
|
||||
|
||||
## PAN-241548
|
||||
|
||||
Fixed an issue where the firewall stopped responding when switching
|
||||
from endpoint authentication bypass to endpoint Kerberos
|
||||
authentication with SWG-proxy traffic.
|
||||
|
||||
## PAN-241230
|
||||
|
||||
Fixed an issue where the SNMP get request status value for Panorama
|
||||
connections was incorrect.
|
||||
|
||||
## PAN-241164
|
||||
|
||||
```caveat
|
||||
PA-410 firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where system and
|
||||
configuration logs sent from the firewall to Panorama contained the
|
||||
serial number field instead of the firewall device name.
|
||||
|
||||
## PAN-241141
|
||||
|
||||
Fixed an issue where creating more than one address object in the
|
||||
same XML API request resulted in a commit error.
|
||||
|
||||
## PAN-241041
|
||||
|
||||
Fixed an issue where, after upgrading to 11.1.0, exporting CSV files
|
||||
for template stack variables or template variables resulted in an
|
||||
empty file.
|
||||
|
||||
## PAN-241018
|
||||
|
||||
```caveat
|
||||
VM-Series firewalls in Microsoft Azure environments only
|
||||
```
|
||||
|
||||
Fixed a Dataplane Development Kit (DPDK) issue where interfaces
|
||||
remained in a link-down stage after an Azure hot plug event.
|
||||
|
||||
## PAN-240993
|
||||
|
||||
Fixed an issue where you were unable to revert a sort in task manager
|
||||
in the admin column.
|
||||
|
||||
## PAN-240786
|
||||
|
||||
Fixed an issue on firewalls in HA configurations where VXLAN sessions
|
||||
were allocated, but not installed or freed, which resulted in a
|
||||
constant high session table usage that was not synced between the
|
||||
firewalls. This resulted in a session count mismatch.
|
||||
|
||||
## PAN-240618
|
||||
|
||||
Fixed an issue where configuration commits were successful even when
|
||||
dynamic peer IKE gateways configured on the same interface and IP
|
||||
address that did not have the same IKE crypto profile.
|
||||
|
||||
## PAN-240612
|
||||
|
||||
Fixed a kernel panic caused by a third-party issue
|
||||
|
||||
## PAN-240596
|
||||
|
||||
Fixed an issue where all_task stopped responding due to
|
||||
an invalid memory address.
|
||||
|
||||
## PAN-240477
|
||||
|
||||
Fixed a temporary hardware issue that caused PAN-SFP-PLUS-CU-5M to
|
||||
not be able to link up on PA-3400 and PA-1400 Series firewalls.
|
||||
|
||||
## PAN-240368
|
||||
|
||||
Fixed an issue where authentication portal redirection for HTTPS
|
||||
websites did not work when Enhanced Handling of SSL/TLS
|
||||
Handshakes for Decrypted Traffic was enabled.
|
||||
|
||||
## PAN-240347
|
||||
|
||||
Fixed an issue with the web interface where the
|
||||
Dashboard and a Device
|
||||
Group policy rule took longer than expected to
|
||||
load.
|
||||
|
||||
## PAN-240308
|
||||
|
||||
Fixed an issue where ElasticSearch did not work as expected when
|
||||
raid-mounts were not fully ready after a reboot.
|
||||
|
||||
## PAN-240251
|
||||
|
||||
Fixed an issue where the vldmgr process incorrectly
|
||||
restarted during an Elasticsearch restart.
|
||||
|
||||
## PAN-239776
|
||||
|
||||
Fixed an issue where Panorama went into maintenance mode due to a
|
||||
GlobalProtect quota configuration that was under the minimum
|
||||
required quota.
|
||||
|
||||
## PAN-239722
|
||||
|
||||
Fixed an issue where SNMP scans to the firewall took longer than
|
||||
expected and intermittently timed out.
|
||||
|
||||
## PAN-239662
|
||||
|
||||
Fixed an issue where the NSSA default route from the firewall was not
|
||||
generated to advertise even though the backbone area default route
|
||||
was advertised during a graceful restart.
|
||||
|
||||
## PAN-239367
|
||||
|
||||
Fixed an issue on the firewall where a memory leak associated with
|
||||
the logrcvr process occurred.
|
||||
|
||||
## PAN-239354
|
||||
|
||||
Fixed an issue where DNS resolution was delayed when an antispyware
|
||||
policy rule was applied to both client to firewall and firewall to
|
||||
internal DNS server legs of a connection.
|
||||
|
||||
## PAN-239337
|
||||
|
||||
Fixed an issue where the log_index was suspended and corrupted BDX
|
||||
files flooded the index_log.
|
||||
|
||||
## PAN-239256
|
||||
|
||||
Fixed an issue where ARP entries were unable to be completed for
|
||||
subinterfaces with SNAT configured.
|
||||
|
||||
## PAN-239255
|
||||
|
||||
Fixed an issue where the firewall did not update the ARP cache
|
||||
timeout value after modifying the
|
||||
arp-cache-timeout setting.
|
||||
|
||||
## PAN-238996
|
||||
|
||||
Fixed an issue where commits did not complete and remained in a
|
||||
pending state due to a race condition. With this fix, the commit
|
||||
will fail after 60 seconds and not remain in a pending state.
|
||||
|
||||
## PAN-238643
|
||||
|
||||
Fixed an issue where a memory leak caused multiple processes to stop
|
||||
responding when VM Information Sources was configured.
|
||||
|
||||
## PAN-238625
|
||||
|
||||
Fixed an issue where, when the physical interface went down, the
|
||||
SD-WAN Ethernet connection state still showed
|
||||
UP/path-monitor due to the Active URL
|
||||
SaaS monitor connection state remaining UP/path-monitor.
|
||||
|
||||
## PAN-238621
|
||||
|
||||
Fixed an issue where the HA3 link status remained down when updating
|
||||
the HA3 interface configuration when the AE interface was up.
|
||||
|
||||
## PAN-238562
|
||||
|
||||
Fixed an issue where log collectors stopped responding when gathering
|
||||
reports from Panorama.
|
||||
|
||||
## PAN-238508
|
||||
|
||||
Fixed an issue where the routed process created
|
||||
excessive logs in the log file.
|
||||
|
||||
## PAN-237678
|
||||
|
||||
Fixed an issue with firewalls in active/passive HA configurations
|
||||
where the passive firewall displayed the error message
|
||||
Unable to read QSFP Module ID when
|
||||
the passive link state was set to shutdown.
|
||||
|
||||
## PAN-237537
|
||||
|
||||
Fixed an issue where, when deleting CTD entries, the
|
||||
all_pktproc process stopped responding which
|
||||
resulted in dataplane failure.
|
||||
|
||||
## PAN-237478
|
||||
|
||||
Fixed an issue where the traffic log displayed 0 bytes for denied
|
||||
sessions.
|
||||
|
||||
## PAN-237454
|
||||
|
||||
Fixed an issue where Panorama stopped redistributing IP
|
||||
address-to-username mappings when packet loss occurred between the
|
||||
distributor and the client.
|
||||
|
||||
## PAN-237369
|
||||
|
||||
```caveat
|
||||
PA-1420 firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where the
|
||||
all_task process stopped responding, which caused
|
||||
the firewall to become unresponsive.
|
||||
|
||||
## PAN-237246
|
||||
|
||||
Fixed an issue where the all_pktproc process repeatedly
|
||||
restarted, which caused the firewall to go into a nonfunctional
|
||||
state.
|
||||
|
||||
## PAN-236802
|
||||
|
||||
Fixed an issue on firewalls in HA configurations where unexpected
|
||||
failovers occurred.
|
||||
|
||||
## PAN-236261
|
||||
|
||||
Fixed an issue where a proxy server was used for External Dynamic
|
||||
List communication even when the dataplane interface was configured
|
||||
through service routes.
|
||||
|
||||
## PAN-236244
|
||||
|
||||
Fixed an issue where you were unable to select Authentication
|
||||
Profiles via the web interface.
|
||||
|
||||
## PAN-236233
|
||||
|
||||
Fixed an issue where SNMP reports displayed incorrect values for SSL
|
||||
Proxy sessions and SSL Proxy utilization.
|
||||
|
||||
## PAN-235737
|
||||
|
||||
Fixed an issue where the brdagent process stopped
|
||||
responding due to a sudden increase in logging to the bcm.log.
|
||||
|
||||
## PAN-235628
|
||||
|
||||
Fixed an issue where you were not prompted for login credentials when
|
||||
you disconnected and connected back to the GlobalProtect portal when
|
||||
SAML authentication was selected along with Single Sign-On (SSO) and
|
||||
Single Log Out (SLO).
|
||||
|
||||
## PAN-235557
|
||||
|
||||
Fixed an issue where uploads from tunnels, including GlobalProtect,
|
||||
were slower than expected when the inner and outer sessions were on
|
||||
different dataplanes.
|
||||
|
||||
## PAN-235476
|
||||
|
||||
Fixed an issue where threat logs from different Security zones were
|
||||
aggregated into one log.
|
||||
|
||||
## PAN-235168
|
||||
|
||||
Fixed an issue where disk space became full even after clearing old
|
||||
logs and content images.
|
||||
|
||||
## PAN-235081
|
||||
|
||||
```caveat
|
||||
VM-Series firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where the firewall
|
||||
sent packets to its own interface after configuring NAT64.
|
||||
|
||||
## PAN-234596
|
||||
|
||||
Fixed an issue on firewalls in active/passive HA configurations where
|
||||
the passive firewall incorrectly became active after a reboot.
|
||||
|
||||
## PAN-234459
|
||||
|
||||
Fixed an issue with the firewall web interface where local SSL
|
||||
decryption exclusion cache entries were not visible.
|
||||
|
||||
## PAN-234290
|
||||
|
||||
Fixed an issue where the firewall displayed incorrect interface
|
||||
transfer rates when running the CLI command show
|
||||
system state filter-pretty sys.s1.px with a
|
||||
filter.
|
||||
|
||||
## PAN-234169
|
||||
|
||||
Fixed an issue where downloading files failed or was slower than
|
||||
expected due to malware scanning even when the session was matched
|
||||
to a Security policy rule with no Anti-Virus profile attached.
|
||||
|
||||
## PAN-234031
|
||||
|
||||
Fixed an issue on multi-core firewalls where the firewall displayed
|
||||
packets out of order when capturing packets on the transmit
|
||||
stage.
|
||||
|
||||
## PAN-233833
|
||||
|
||||
Fixed an issue where enabling Jumbo frames resulted in software
|
||||
packet buffer depletion.
|
||||
|
||||
## PAN-233789
|
||||
|
||||
Fixed an issue with Push and Commit
|
||||
and Push operations where the user was not correctly
|
||||
bound to the scope, which caused all device groups to be selected
|
||||
for a selective push.
|
||||
|
||||
## PAN-233692
|
||||
|
||||
Fixed an issue on Panorama where the configd process
|
||||
stopped, which caused performance issues.
|
||||
|
||||
## PAN-233684
|
||||
|
||||
Fixed an issue on Panorama where Push to
|
||||
Devices or Commit and Push
|
||||
operations took longer than expected on the web interface.
|
||||
|
||||
## PAN-233603
|
||||
|
||||
```caveat
|
||||
CN-Series firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where slot
|
||||
information was not correct after a slotd process
|
||||
restart on the management pod.
|
||||
|
||||
## PAN-233541
|
||||
|
||||
Fixed an issue where device group and template administrators with
|
||||
access to a specific virtual system were able to see logs for all
|
||||
virtual systems via Context Switch.
|
||||
|
||||
## PAN-233517
|
||||
|
||||
Fixed an issue on Panorama where managed device templates and device
|
||||
groups took longer than expected to display in the Push
|
||||
to Devices window.
|
||||
|
||||
## PAN-233463
|
||||
|
||||
Fixed an issue where the X-Forwarded-For (XFF) IP addressed value was
|
||||
not displayed in traffic logs.
|
||||
|
||||
## PAN-233207
|
||||
|
||||
Fixed an issue where the configd process stopped
|
||||
responding when a partial configuration revert operation was
|
||||
performed.
|
||||
|
||||
## PAN-233039
|
||||
|
||||
Fixed an issue where GENEVE encapsulated packets coming from a GFE
|
||||
Proxy mapped to an incorrect Security policy rule.
|
||||
|
||||
## PAN-232953
|
||||
|
||||
Fixed an issue where you were able to cancel the same commit
|
||||
repeatedly, which displayed the error message Cannot
|
||||
stop job <job> at this time.
|
||||
|
||||
## PAN-232368
|
||||
|
||||
Fixed an issue where commits failed with the error message
|
||||
Error: Max. user groups used in policy 1389 exceed
|
||||
capacity (1000).
|
||||
|
||||
## PAN-232250
|
||||
|
||||
Fixed an issue where, when SSH service profiles for management access
|
||||
were set to None, the reported output was
|
||||
incorrect.
|
||||
|
||||
## PAN-231802
|
||||
|
||||
Fixed an issue where an Advanced Routing BGP session flapped with
|
||||
commits when BGP peer authentication was enabled.
|
||||
|
||||
## PAN-231552
|
||||
|
||||
Fixed an issue where traffic returning from a third-party Security
|
||||
chain was dropped.
|
||||
|
||||
## PAN-231507
|
||||
|
||||
```caveat
|
||||
PA-1400 Series firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where, when
|
||||
an HSCI interface was used as an HA2 interface, HA2 packets were
|
||||
intermittently dropped on the passive firewall, which caused the HA2
|
||||
connection to flap due to missing HA2 keepalive messages.
|
||||
|
||||
## PAN-231480
|
||||
|
||||
Fixed an issue where the firewall CLI output for GlobalProtect log
|
||||
quota settings did not match the settings configured on the Panorama
|
||||
web interface.
|
||||
|
||||
## PAN-231439
|
||||
|
||||
Fixed an issue where, when a VoIP call using dynamic IP and NAT was
|
||||
put on hold, the audio became one-way due to early termination of
|
||||
NAT ports.
|
||||
|
||||
## PAN-231395
|
||||
|
||||
Fixed an intermittent issue where the OCSP query failed.
|
||||
|
||||
## PAN-231148
|
||||
|
||||
Fixed an issue where no DHCP option list was defined when using
|
||||
GlobalProtect.
|
||||
|
||||
## PAN-230813
|
||||
|
||||
Fixed an issue where flex memory leak caused decryption failure and
|
||||
commit failure with the error message Error preparing
|
||||
global objects failed to handle
|
||||
CONFIG_UPDATE_START.
|
||||
|
||||
## PAN-230746
|
||||
|
||||
Fixed an issue on the web interface where device groups with a large
|
||||
number of managed firewalls displayed the
|
||||
Policy page more slowly than
|
||||
expected.
|
||||
|
||||
## PAN-230656
|
||||
|
||||
```caveat
|
||||
Firewalls in HA configurations only
|
||||
```
|
||||
|
||||
Fixed an issue where a
|
||||
split brain condition occurred on both firewalls after booting up
|
||||
any firewall, and an HA switchover occurred after booting up a
|
||||
firewall with a higher HA priority even when no preemptive option
|
||||
was enabled on the firewall.
|
||||
|
||||
## PAN-230377
|
||||
|
||||
Fixed an issue where FEC support was not enabled by default for
|
||||
PAN-25G-SFP28-LR modules.
|
||||
|
||||
## PAN-230372
|
||||
|
||||
Fixed an issue where OCSP queries did not work after upgrading to a
|
||||
PAN-OS 11.0 release.
|
||||
|
||||
## PAN-230039
|
||||
|
||||
Fixed an issue where migrating from an Enterprise License Agreement
|
||||
(ELA) to a Flexible VM-Series License failed with a deactivation
|
||||
error message.
|
||||
|
||||
## PAN-229985
|
||||
|
||||
```caveat
|
||||
VM-Series firewalls in Amazon Web Services (AWS) only
|
||||
```
|
||||
|
||||
Fixed an issue where, when Gateway Load Balancer (GWLB) overlay
|
||||
routing was enabled, GWLB packets re-encapsulated with the incorrect
|
||||
flow cookie in the GENEVE header when transmitting the response back
|
||||
to GWLB.
|
||||
|
||||
## PAN-229874
|
||||
|
||||
Fixed an issue where the firewall was unable to form OSPFv3 adjacency
|
||||
when using an ESP authentication profile.
|
||||
|
||||
## PAN-229873
|
||||
|
||||
```caveat
|
||||
PA-7050 firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue related to
|
||||
brdagent process errors.
|
||||
|
||||
## PAN-229315
|
||||
|
||||
Fixed an issue where Octets in NetFlow records were always reported
|
||||
to be 0 despite having a non-zero packet count.
|
||||
|
||||
## PAN-229069
|
||||
|
||||
Fixed an issue where clientless VPN portal users were unable to
|
||||
access clientless applications due to an SSL renegotiation being
|
||||
triggered.
|
||||
|
||||
## PAN-228457
|
||||
|
||||
```caveat
|
||||
PA-7000 firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where the GTP logs
|
||||
forwarded from the firewall to the log collector did not include the
|
||||
pcap.
|
||||
|
||||
## PAN-228442
|
||||
|
||||
Fixed an issue on firewalls in active/passive HA configurations where
|
||||
sessions did not fail over from the active firewall to the passive
|
||||
firewall when upgrading PAN-OS.
|
||||
|
||||
## PAN-228323
|
||||
|
||||
Fixed an issue where a large number of Panorama management server
|
||||
cookies were created in the Redis database when the Cloud-Service
|
||||
plugin sent an authentication request every second, and logging in
|
||||
to or using Panorama was slower than expected.
|
||||
|
||||
## PAN-227973
|
||||
|
||||
Fixed an issue where commits failed after renaming an address object
|
||||
or object group with a selective commit.
|
||||
|
||||
## PAN-227939
|
||||
|
||||
Fixed an issue where the all_task process stopped
|
||||
responding due to high wifclient memory usage, which caused the
|
||||
firewall to reboot.
|
||||
|
||||
## PAN-227887
|
||||
|
||||
Fixed an issue where IP address checksums were calculated
|
||||
incorrectly.
|
||||
|
||||
## PAN-227510
|
||||
|
||||
Fixed an issue where the error message Failed to
|
||||
establish GRPC connection to UrlCat service: failed to start
|
||||
grpc connection was displayed in the system log
|
||||
when the Advanced URL Filtering license was applied but not
|
||||
configured.
|
||||
|
||||
## PAN-227064
|
||||
|
||||
Fixed an issue with high availability (HA) sync failure when
|
||||
performing a partial commit after creating a Security policy via
|
||||
REST API.
|
||||
|
||||
## PAN-226489
|
||||
|
||||
Fixed an issue where Panorama was unable to push scheduled dynamic
|
||||
updates to firewalls with the error message Failed to
|
||||
add deploy job. Too many (30) deploy jobs pending for
|
||||
device.
|
||||
|
||||
## PAN-225090
|
||||
|
||||
Fixed an issue on Panorama where Commit and
|
||||
Push was grayed out when making changes to a
|
||||
template or device group.
|
||||
|
||||
## PAN-225064
|
||||
|
||||
Fixed an issue where Panorama stopped responding and entered a
|
||||
non-functional state after moving multiple Security policy rules at
|
||||
the same time from one device group to another device group.
|
||||
|
||||
## PAN-224938
|
||||
|
||||
Fixed an issue where the CLI command settings for set
|
||||
system setting logging max-log-rate did not
|
||||
persist after a mgmtsrvr process restart.
|
||||
|
||||
## PAN-224584
|
||||
|
||||
Fixed an issue on Panorama where generating UAR reports for 30 days
|
||||
or more was slower than expected, and reports showed the same logs
|
||||
repeatedly in a loop.
|
||||
|
||||
## PAN-224424
|
||||
|
||||
```caveat
|
||||
PA-3440 firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where you were
|
||||
unable to set the link speed as 25Gbps from the drop-down in the
|
||||
template for Ethernet ports 1/23 through 1/26.
|
||||
|
||||
## PAN-224060
|
||||
|
||||
```caveat
|
||||
PA-220 Series firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where multiple
|
||||
dataplane processes stopped responding after an upgrade.
|
||||
|
||||
## PAN-223365
|
||||
|
||||
Fixed an issue where Panorama was unable to query any logs if the
|
||||
Elasticsearch health status for any log collector was degraded.
|
||||
|
||||
## PAN-223172
|
||||
|
||||
Fixed an issue on Panorama where host IDs manually added to the
|
||||
device quarantine list were unexpectedly removed.
|
||||
|
||||
## PAN-222188
|
||||
|
||||
A CLI command was introduced to address an issue where SNMP
|
||||
monitoring performance was slower than expected, which resulted in
|
||||
snmpwalk timeouts.
|
||||
|
||||
## PAN-222002
|
||||
|
||||
Fixed an issue where content updates failed with the error message
|
||||
Unable to get key pancontent-8.0.pass from
|
||||
cryptod. Error -9.
|
||||
|
||||
## PAN-220931
|
||||
|
||||
```caveat
|
||||
Panorama appliances in FIPS-CC mode only
|
||||
```
|
||||
|
||||
Fixed an issue
|
||||
where scheduled email reports did not contain PDF attachments.
|
||||
|
||||
## PAN-219805
|
||||
|
||||
Fixed an issue where the reportd process stopped
|
||||
responding due to a race condition.
|
||||
|
||||
## PAN-219113
|
||||
|
||||
Fixed an issue where, when a port on the NPC was configured for log
|
||||
forwarding, the ingress traffic on the card was sent for processing
|
||||
to the LPC, and the LPC card was reloaded when the ingress volume of
|
||||
traffic was high.
|
||||
|
||||
## PAN-217619
|
||||
|
||||
Fixed an issue where supported Bi-DI transceivers were not recognized
|
||||
which caused ports to not come up.
|
||||
|
||||
## PAN-217307
|
||||
|
||||
Fixed an issue where the log-start and
|
||||
log-end policy rule filters did not
|
||||
return reliable results when set to no
|
||||
or yes.
|
||||
|
||||
## PAN-217241
|
||||
|
||||
Fixed an issue where predict session conversion failed for RTP and
|
||||
RTCP traffic.
|
||||
|
||||
## PAN-209574
|
||||
|
||||
Fixed an issue with HTTP/2 traffic where downloading large files did
|
||||
not work when decryption was enabled.
|
||||
|
||||
## PAN-205482
|
||||
|
||||
Fixed an issue related to the configd process where
|
||||
Panorama displayed the error Server not
|
||||
responding when editing policies.
|
||||
|
||||
## PAN-199141
|
||||
|
||||
Fixed an issue where renaming a device group and then performing a
|
||||
partial commit led to the device group hierarchy being incorrectly
|
||||
changed.
|
||||
|
||||
## PAN-196395
|
||||
|
||||
```caveat
|
||||
PA-5450 firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where the firewall
|
||||
accepted 12 aggregate ethernet interfaces, but you were unable to
|
||||
configure interfaces 9-12 via the web interface.
|
||||
|
||||
## PAN-174454
|
||||
|
||||
Fixed an issue where the firewall did not fetch group and user
|
||||
membership due to the Okta sync domain not matching the active Cloud
|
||||
Identity Engine domain.
|
||||
Reference in New Issue
Block a user