Remove dates from issue filenames
This commit is contained in:
@@ -0,0 +1,418 @@
|
||||
---
|
||||
type: Addressed
|
||||
product: PAN-OS
|
||||
version: 11.1.4-h13
|
||||
---
|
||||
|
||||
## PAN-279604
|
||||
|
||||
Fixed an issue where scheduled SaaS application usage reports were
|
||||
generated incorrectly, and the login page was displayed instead of
|
||||
the report content.
|
||||
|
||||
## PAN-278088
|
||||
|
||||
Fixed an issue where the show system resources
|
||||
follow CLI command was not available.
|
||||
|
||||
## PAN-274791
|
||||
|
||||
Fixed an issue where the firewall rebooted when Shared Pool Type 32
|
||||
was depleted and traffic matched advanced features.
|
||||
|
||||
## PAN-274592
|
||||
|
||||
```caveat
|
||||
Firewalls in HA configurations only
|
||||
```
|
||||
|
||||
Fixed an issue where
|
||||
the firewall did not fail over when the active firewall experienced
|
||||
data plane issues.
|
||||
|
||||
## PAN-273994
|
||||
|
||||
A fix was made to address CVE-2025-0111.
|
||||
|
||||
## PAN-273971
|
||||
|
||||
A fix was made to address CVE-2025-0108.
|
||||
|
||||
## PAN-273278
|
||||
|
||||
A fix was made to address CVE-2025-0109.
|
||||
|
||||
## PAN-273129
|
||||
|
||||
Fixed an issue on the web interface where the
|
||||
negate option was visible when you
|
||||
clicked on the rule name, but not when you viewed the target options
|
||||
from the rulebase attribute.
|
||||
|
||||
## PAN-273085
|
||||
|
||||
Fixed an issue on the web interface where you were unable to edit or
|
||||
create policy rules.
|
||||
|
||||
## PAN-273026
|
||||
|
||||
Fixed an issue where traffic logs did not display correctly when
|
||||
filters were applied.
|
||||
|
||||
## PAN-273019
|
||||
|
||||
Fixed an intermittent issue where SSL decryption failed.
|
||||
|
||||
## PAN-272959
|
||||
|
||||
Fixed an issue where the firewall generated BGP update packets larger
|
||||
than 1500 bytes when the interface MTU was 1500 bytes and jumbo
|
||||
frames were enabled globally.
|
||||
|
||||
## PAN-272006
|
||||
|
||||
Fixed an issue where the firewall did not trigger a kernel core dump
|
||||
as a large core when the CPLD (Complex Programmable Logic Device)
|
||||
sent a Non-Maskable Interrupt (NMI) to the CPU.
|
||||
|
||||
## PAN-271937
|
||||
|
||||
```caveat
|
||||
PA-5450 firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where the
|
||||
logrcvr process stopped responding when processing
|
||||
logs from a large number of sources.
|
||||
|
||||
## PAN-271926
|
||||
|
||||
Fixed an issue where TLS 1.3 decryption failed with a bad record MAC
|
||||
error when the firewall was configured to decrypt and inspect TLS
|
||||
traffic.
|
||||
|
||||
## PAN-270549
|
||||
|
||||
Fixed an issue where some TLS connections were not handled correctly,
|
||||
which led to instability in the dataplane.
|
||||
|
||||
## PAN-270471
|
||||
|
||||
```caveat
|
||||
Firewalls in active/active configurations only
|
||||
```
|
||||
|
||||
Fixed an
|
||||
issue where the firewall did not detect configuration changes when
|
||||
only the interface of an IKE gateway was changed, which caused IPSec
|
||||
tunnels to not come up after migrating the IKE gateway IP address
|
||||
from a subinterface to a physical interface.
|
||||
|
||||
## PAN-270077
|
||||
|
||||
```caveat
|
||||
VM-Series firewalls in Amazon Web Services (AWS) environments only
|
||||
```
|
||||
|
||||
Fixed an issue template values were missing in newly
|
||||
spun firewalls in auto scale deployments without an explicit push
|
||||
with forced template values from Panorama.
|
||||
|
||||
## PAN-269731
|
||||
|
||||
Fixed an issue where Panorama did not display logs from firewalls
|
||||
after upgrading to PAN-OS 10.2.11 on devices due to Elasticsearch
|
||||
(ES) getting restarted continuously.
|
||||
|
||||
## PAN-269539
|
||||
|
||||
Fixed an issue where whitespace was added before the timestamp in
|
||||
syslog logs forwarded from Panorama.
|
||||
|
||||
## PAN-269499
|
||||
|
||||
Fixed an issue where the firewall stopped responding when receiving a
|
||||
high number of logs.
|
||||
|
||||
## PAN-269106
|
||||
|
||||
Fixed issue where the wifclient
|
||||
restarted and multiple processes stopped responding.
|
||||
|
||||
## PAN-268909
|
||||
|
||||
Fixed an issue where IP address tags were removed from firewalls
|
||||
after a management server or useridd process restart.
|
||||
This occurred when a Panorama serial-number based configuration was
|
||||
used for User-ID redistribution.
|
||||
|
||||
## PAN-268815
|
||||
|
||||
Fixed an issue where the firewall entered a non-functional state due
|
||||
to duplicate entries in the shared memory.
|
||||
|
||||
## PAN-268727
|
||||
|
||||
Fixed an issue where traffic was dropped when the accumulation proxy
|
||||
was enabled and header insertion modified packets.
|
||||
|
||||
## PAN-267781
|
||||
|
||||
Fixed an issue where Panorama did not display the Source Dynamic
|
||||
Address Group.
|
||||
|
||||
## PAN-267762
|
||||
|
||||
```caveat
|
||||
Panorama virtual appliances in Management-Only mode
|
||||
```
|
||||
|
||||
Fixed
|
||||
a issue where the maximum configuration size was lower than
|
||||
expected.
|
||||
|
||||
## PAN-267671
|
||||
|
||||
Fixed an issue where the firewall rebooted unexpectedly
|
||||
due to the all_task process restarting with an OOM
|
||||
condition due to a memory leak on the reportd
|
||||
process.
|
||||
|
||||
## PAN-267430
|
||||
|
||||
Fixed an issue where Panorama was unable to return logs for queries
|
||||
that were longer than 64,000 characters.
|
||||
|
||||
## PAN-267097
|
||||
|
||||
Fixed an issue where the replay database size increased significantly
|
||||
due to local and special configurations not being purged after
|
||||
commits.
|
||||
|
||||
## PAN-266581
|
||||
|
||||
Fixed an issue where a failed SSL connection to a syslog server
|
||||
resulted in a /tmp/srvr.crt.xxxxxx file
|
||||
not being removed, which caused index node (inode) exhaustion.
|
||||
|
||||
## PAN-266559
|
||||
|
||||
Fixed an issue where partial commits failed when objects that were
|
||||
referenced in a high number of Security policy rules were
|
||||
renamed.
|
||||
|
||||
## PAN-266354
|
||||
|
||||
Fixed an issue where Hybrid-SWG explicit proxy connections failed
|
||||
when the number of destination domains exceeded 1024.
|
||||
|
||||
## PAN-265745
|
||||
|
||||
Fixed an issue where the firewall displayed incorrect MAC receive
|
||||
error counters for VMWare devices hosted in ESXi.
|
||||
|
||||
## PAN-265179
|
||||
|
||||
Fixed an issue where a kernel race condition caused the firewall to
|
||||
reboot with a kernel panic.
|
||||
|
||||
## PAN-265160
|
||||
|
||||
Fixed an issue where the firewall created multiple connections to a
|
||||
syslog server and remained in the FINWAIT1 state, which caused logs
|
||||
to drop while being forwarded to the syslog server.
|
||||
|
||||
## PAN-264369
|
||||
|
||||
Fixed an issue where the 7 Day Threat Report
|
||||
was empty in the scheduled reports sent via email.
|
||||
|
||||
## PAN-263291
|
||||
|
||||
Fixed an issue where Microsoft Outlook did not work as expected when
|
||||
the GlobalProtect clientless VPN was configured.
|
||||
|
||||
## PAN-262627
|
||||
|
||||
Fixed an issue where the firewall rebooted into maintenance mode due
|
||||
to a service failure in the configd process.
|
||||
|
||||
## PAN-262383
|
||||
|
||||
Fixed an issue where the firewall was unable to decompress the HTTP2
|
||||
header, which caused the session to be classified as unknown-tcp
|
||||
instead of web-browsing.
|
||||
|
||||
## PAN-262254
|
||||
|
||||
Fixed an issue where the firewall experienced an OOM condition and
|
||||
the useridd process stopped responding, which caused
|
||||
the firewall to drop interfaces from their respective aggregate
|
||||
groups.
|
||||
|
||||
## PAN-261998
|
||||
|
||||
Fixed an issue where the firewall configuration process restarted
|
||||
during an External Dynamic List refresh or a commit and push
|
||||
operation.
|
||||
|
||||
## PAN-260290
|
||||
|
||||
Fixed an issue for fixed model licenses to support new content size
|
||||
requirements by reducing the total sessions supported to be
|
||||
equivalent to their flex memory counterpart
|
||||
|
||||
## PAN-260149
|
||||
|
||||
Fixed an issue where the management plane DNS cache size was lower
|
||||
than expected.
|
||||
|
||||
## PAN-259055
|
||||
|
||||
Fixed an issue where the firewall stopped responding when receiving
|
||||
SNMPv3 traps.
|
||||
|
||||
## PAN-258996
|
||||
|
||||
Fixed an issue where the firewall displayed the SFP ports as
|
||||
PowerDown when the SFP transceiver
|
||||
was removed and reinserted or the port was shut down and brought
|
||||
back up on the peer device.
|
||||
|
||||
## PAN-257390
|
||||
|
||||
```caveat
|
||||
PA-5250 firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where the
|
||||
logrcvr process stopped responding due to a
|
||||
segmentation fault.
|
||||
|
||||
## PAN-256669
|
||||
|
||||
Fixed an issue where the memory usage reported by SNMP did not match
|
||||
the memory usage reported by the top command.
|
||||
|
||||
## PAN-255773
|
||||
|
||||
Fixed an issue where errors related to applications in
|
||||
Content-preview caused commit
|
||||
failures.
|
||||
|
||||
## PAN-255747
|
||||
|
||||
Fixed an issue on the firewall where CLI commands returned
|
||||
Server error: op command for client dagger timed
|
||||
out as client is not available.
|
||||
|
||||
## PAN-255653
|
||||
|
||||
Fixed an HA failover issue where, when Management Processing Card
|
||||
(MPC) or Base Card (BC) failures occurred, the HA link went down,
|
||||
which caused fpp-down events on one firewall.
|
||||
|
||||
## PAN-253485
|
||||
|
||||
```caveat
|
||||
Firewalls in active/passive HA configurations only
|
||||
```
|
||||
|
||||
Fixed
|
||||
an issue where dataplane packet capture filter configuration failed
|
||||
on the active firewall with the error op command for
|
||||
client dagger timed out as client is not
|
||||
available.
|
||||
|
||||
## PAN-252669
|
||||
|
||||
Fixed an issue where the ikemgr process stopped
|
||||
responding with a SIGSEGV error.
|
||||
|
||||
## PAN-252036
|
||||
|
||||
Fixed an issue where, when the GlobalProtect portal was not
|
||||
configured, accessing the GlobalProtect gateway still loaded a
|
||||
portal malformed page.
|
||||
|
||||
## PAN-252224
|
||||
|
||||
Fixed an issue where Panorama did not forward logs to a syslog server
|
||||
over an SSL connection using CRL as a revocation verification
|
||||
method.
|
||||
|
||||
## PAN-250585
|
||||
|
||||
Fixed an issue where the firewall CPU use increased after upgrading
|
||||
from PAN-OS 10.2.4-h4 to PAN-OS 10.2.8 due to a change in system
|
||||
resource reporting by the REST API.
|
||||
|
||||
## PAN-246209
|
||||
|
||||
Fixed an issue where IPSec VPN tunnels went down after receiving a
|
||||
DHCP server message that the DHCP client cleared the IP address on
|
||||
the interface.
|
||||
|
||||
## PAN-242739
|
||||
|
||||
Fixed an issue on the firewall where the dataplane repeatedly
|
||||
restarted.
|
||||
|
||||
## PAN-240225
|
||||
|
||||
Fixed an issue where authentication failed on web-based GlobalProtect
|
||||
portal.
|
||||
|
||||
## PAN-238594
|
||||
|
||||
Fixed an issue where the firewall rebooted when a QSFP28 cable was
|
||||
removed from the port while the port was passing traffic.
|
||||
|
||||
## PAN-232833
|
||||
|
||||
Fixed an issue where the following error message displayed for IoT
|
||||
trial licenses: IoT Security license is required for
|
||||
the feature to function.
|
||||
|
||||
## PAN-232550
|
||||
|
||||
Fixed an issue where SNMPv3 authentication failed when using SHA-512
|
||||
Auth protocol.
|
||||
|
||||
## PAN-225228
|
||||
|
||||
Fixed an issue where filtering threat logs using any value under
|
||||
THREAT ID/NAME displayed the error
|
||||
Invalid term.
|
||||
|
||||
## PAN-218873
|
||||
|
||||
Fixed an issue where a HIP mask was reused when an existing IP
|
||||
address user mapping was updated by a new IP address user mapping
|
||||
that had a different username but the same IP address.
|
||||
|
||||
## PAN-216054
|
||||
|
||||
Fixed an issue that caused the firewall's fan speed to increase while
|
||||
it was idle.
|
||||
|
||||
## PAN-214430
|
||||
|
||||
Fixed an issue where some commands did not have executable
|
||||
permissions.
|
||||
|
||||
## PAN-212197
|
||||
|
||||
Fixed an issue where you were able to create local administrator
|
||||
usernames that contained only numbers.
|
||||
|
||||
## PAN-207972
|
||||
|
||||
Fixed an issue on the web interface where the BGP routing table did
|
||||
not display advertised routes.
|
||||
|
||||
## PAN-193285
|
||||
|
||||
Fixed an issue where the policy optimizer feature did not add entries
|
||||
back to the mongodb database after
|
||||
removing them during an upgrade or downgrade.
|
||||
Reference in New Issue
Block a user