Initial prototype

This commit is contained in:
2026-03-16 09:16:34 -05:00
parent 2f8bf503f1
commit a0e4f58f62
55 changed files with 13870 additions and 0 deletions
@@ -0,0 +1,73 @@
---
type: Addressed
product: PAN-OS
version: 11.1.0
---
## PAN-233557
Fixed an issue where, after using Panorama to configure per policy persistent DIPP, downgrading the firewall using Panorama and then upgrading the firewall back to a later PAN-OS release, the global DIPP configuration was not successfully converted b ack to the per policy persistent DIPP rules.
## PAN-230359
Fixed an issue where SAML authentication failed with the error message Failed to verify signature against certificate when ds:KeyName was in the IdP metadata.
## PAN-227639
Fixed an issue where the ACC displayed an incorrect DNS-base application traffic byte count.
## PAN-227376
Fixed an issue where a memory overrun caused the all_task process to stop responding.
## PAN-227368
Fixed an issue where GlobalProtect users could not connect the app to a portal or gateway and GlobalProtect Clientless VPN users were unable to access applications when authentication took longer than 20 seconds.
## PAN-226418
A CLI command was added to address an issue where long-lived sessions aged out even when there was ongoing traffic.
## PAN-226198
Fixed an issue on Panorama where the configd process repeatedly restarted when attempting to make configuration changes.
## PAN-225920
Fixed an issue where duplicate predict sessions didn't release NAT resources.
## PAN-225886
Fixed an issue where if you enabled explicit proxy mode for the web proxy, intermittent errors and unexpected TCP reconnections may have occurred.
## PAN-225169
Added a CLI command to view Strata Logging Service queue usage.
## PAN-224772
Fixed a high memory usage issue with the mongodb process that caused an OOM condition.
## PAN-224145
Fixed an issue in multi-vsys environments where, when Panorama was on a PAN-OS 10.2 release and the firewall was on a PAN-OS 10.1 release, commits failed on the firewall when inbound inspection mode was configured in the decryption policy rule.
## PAN-223457
Fixed an issue where, if the number of group queries exceeded the Okta rate limit threshold, the firewall cleared the cache for the groups.
## PAN-221126
Fixed an issue where email server profiles (Device > Server Profiles > Email and Panorama > Server Profiles > Email) to forward logs as email notifications were not forwarded in a readable format.
## PAN-218555
Fixed an issue where the firewall did not receive dynamic address updates pushed from Panorama during initial registration to Panorama.
## PAN-213931
Fixed an issue where the logrcvr process cache was not in sync with the mapping on the firewall.
## PAN-206913
Fixed an issue where, when DHCPv6 client was configured on firewalls in active/passive HA configurations, releasing the IPv6 address from the client released the IPv6 address from only the active firewall.