aaron.axvig/firewallissues
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add PAN-OS 10.2 reference files

Browse Source
This commit is contained in:
aaron.axvig committed 2026-10-10 15:04:59 -05:00
1 parent d7ebcb4299
commit a404ee5df7
54 files changed
+25286
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

reference/PAN-OS/addressed/10.2.10.html
+742
View File
@@ -0,0 +1,742 @@
<table class="table colsep rowsep table-striped">
<!--cq:include script="../../common/tablestack.jsp" /-->
<colgroup>
<col style="width: 25%" />
<col style="width: 75%" />
</colgroup>
<thead class="thead">
<tr class="row rowsep">
<th class="entry">
<div class="p"><b class="ph b">Issue ID</b></div>
</th>
<th class="entry">
<div class="p"><b class="ph b">Description</b></div>
</th>
</tr>
</thead>
<tbody class="tbody">
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-257197</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where <span class="ph systemoutput">ifType</span> and
<span class="ph systemoutput">ifSpeed</span> were not populated in
asynchronous mode of SNMP operations.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-256181</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the management interface and front panel port
interface statistics were not populated in asynchronous mode of SNMP
operations.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-255868</b></div>
</td>
<td class="entry relcol">
<div class="p">
(<tt class="ph tt">PA-3400 Series firewalls only</tt>) Fixed an issue
where the firewall entered maintenance mode after enabling kernel data
collection during the silent reboot.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-255396</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, when using serial number and IP address
authentication, and multiple gateways were configured, the portal
returned the last gateway in the list and disregarded the satellite
assignment by serial number.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-253546</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where a TLS client hello was split into multiple
packets and arrived out of order, so the packets were dropped and the
session terminated.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-253317</b></div>
</td>
<td class="entry relcol">
<div class="p">
(<tt class="ph tt"
>VM-Series firewalls on Microsoft Azure environments only</tt
>) Fixed an issue where you were unable to log in to the firewall
after a private data reset.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-252730</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the Elasticsearch status for a log collector
group changed to red or yellow after performing a collector group
push.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-252517</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where SNMP failed to respond to multiple Object
Identifier (OID) queries in a single SNMP GET request.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-251895</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where enabling inline Cloud Analysis features caused a
slow packet buffer leak, which resulted in performance issues and
dropped traffic.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-251639</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where an out of memory condition might occur due to a
memory leak in the
<a
class="term"
href="#"
title=""
data-scope=""
data-format="dita"
data-type=""
target="_self"
>varrcvr</a
>
process when a Wildfire Analysis security profile is enabled.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-251563</b></div>
</td>
<td class="entry relcol">
<div class="p">
Added CPLD enhancement to capture external power issues.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-251013</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on the web interface where the
<span class="ph uicontrol">Virtual Router</span> and
<span class="ph uicontrol">Virtual System</span> configurations for
the template incorrectly showed as
<span class="ph uicontrol">none</span>.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-250083</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on firewalls in HA configurations where packets were
dropped over HA3 HSCI due to the default MRU being incorrect.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-250020</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where MLC2 verdict retrieval failed due to a regression
in loopback data flag handling.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-248130</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the
<span class="ph uicontrol">AND</span> operation under a Dynamic
Address Group comparison did not work after upgrading the AWS plugin
to 3.0.1.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-248105</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the GlobalProtect SSL VPN tunnel immediately
disconnected due to a keep-alive timeout.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-246976</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue with unbalanced NAT session distribution with
multidataplane firewalls when persistent-dipp was enabled.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-246960</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where firewalls failed to fetch content updates from
the WildFire private cloud due to an
<span class="ph uicontrol">Unsupported protocol</span> error.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-245850</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on Panorama appliances in active/passive HA
configurations where the firewalls entered an HA out-of-sync status
and jobs failed on the passive appliance with the error message
<span class="ph systemoutput"
>Could not merged running config from file</span
>.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-245842</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue with the syn-cookie option where traffic unexpectedly
stopped during packet exchange.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-245690</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the managed collectors health status on Panorama
displayed as empty.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-245125</b></div>
</td>
<td class="entry relcol">
<div class="p">
(<tt class="ph tt"
>VM-Series firewalls in Microsoft Azure environments only</tt
>) Fixed an issue where file descriptors were not closed due to
invalid configurations.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-244907</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where ports did not go down when moving from an active
state to a suspended state.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-244746</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where changes committed on Panorama were not reflected
on the firewall after a successful push.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-244648</b></div>
</td>
<td class="entry relcol">
<div class="p">
(<tt class="ph tt">PA-5200 Series only</tt>) Fixed an issue where the
firewall did not boot up after a factory reset, and, with FIPS mode
enabled, the firewall rebooted into maintenance mode.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-244622</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where FIB repush did not work with Advanced Routing
enabled.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-244013</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the web interface did not display newly added
antispyware signatures or Vulnerability signatures.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-243240</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the using QoS caused packet buffer utilization to
increase exponentially and the
<span class="ph systemoutput">PKI POOL DFLT</span> pool depleted until
a reboot was performed.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-242893</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the verdict for www.googleapis.com displayed the
message <span class="ph systemoutput">not-resolved</span>.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-242309</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where a higher byte count (s2c) was observed for
DNS-Base application.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-241230</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the SNMP get request status value for Panorama
connections was incorrect.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-241192</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where HIP reports did not match HIP objects configured
with certificate check.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-240786</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on firewalls in HA configurations where VXLAN sessions
were allocated, but not installed or freed, which resulted in a
constant high session table usage that was not synced between the
firewalls. This resulted in a session count mismatch.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-240612</b></div>
</td>
<td class="entry relcol">
<div class="p">Fixed a kernel panic caused by a third-party issue</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-240368</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where Authentication Portal redirection for HTTPS
websites did not work when
<span class="ph uicontrol"
>Enhanced Handling of SSL/TLS Handshakes for Decrypted Traffic</span
>
was enabled.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-240347</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue with the web interface where the
<span class="ph uicontrol">Dashboard</span> and a
<span class="ph uicontrol">Device Group</span> policy rule took longer
than expected to load.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-240225</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where authentication failed on web-based GlobalProtect
portal.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-239662</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the NSSA default route from the firewall was not
generated to advertise even though the backbone area default route was
advertised during a graceful restart.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-239354</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where DNS resolution was delayed when an antispyware
policy rule was applied to both client to firewall and firewall to
internal DNS server legs of a connection.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-238625</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where, when the physical interface went down, the
SD-WAN Ethernet connection state still showed
<span class="ph uicontrol">UP/path-monitor</span> due to the Active
URL SaaS monitor connection state remaining UP/path-monitor.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-237608</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where a NetFlow export truncated the source username.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-236133</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where SSL traffic was impacted when
<span class="ph uicontrol">SSL Command and Control detector</span> for
Incline Cloud Analysis was set to
<span class="ph uicontrol">reset-both</span>,
<span class="ph uicontrol">reset-client</span>,
<span class="ph uicontrol">reset-server</span>, or
<span class="ph uicontrol">drop</span>.
</div>
</td>
</tr>
<tr class="row">
<td class="entry">
<div class="p"><b class="ph b">PAN-232550 </b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where SNMPv3 authentication failed when using SHA-512
Auth protocol.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-231642</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on the Panorama web interface where users who were
logged in through multiple sessions were able to see an active lock on
only one session.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-229115</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on the web interface where the screen was blank after
logging in to Panorama.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-226108</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the
<a
class="term"
href="#"
title=""
data-scope=""
data-format="dita"
data-type=""
target="_self"
>masterd</a
>
process was unable to start or stop the
<a
class="term"
href="#"
title=""
data-scope=""
data-format="dita"
data-type=""
target="_self"
>sysd</a
>
process.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-225394</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on the firewall where SNMP incorrectly reported high
packet descriptor usage.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-223914</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on Panorama where the
<a
class="term"
href="#"
title=""
data-scope=""
data-format="dita"
data-type=""
target="_self"
>reportd</a
>
process unexpectedly stopped responding.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-223418</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where heartbeats to the
<a
class="term"
href="#"
title=""
data-scope=""
data-format="dita"
data-type=""
target="_self"
>brdagent</a
>
process were lost, resulting in the process not responding, which
caused the firewall to reboot.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-221041</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the following error message was seen frequently
in the system logs:
<span class="ph systemoutput"
>Clearing snmpd.log due to log overflow</span
>.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-216941</b></div>
</td>
<td class="entry relcol">
<div class="p">
(<tt class="ph tt">Panorama appliances in Log Collector mode only</tt
>) Fixed an issue where Panorama stopped processing and saving logs.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-164885</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on Panorama where
<span class="ph uicontrol">Commit and Push</span> or
<span class="ph uicontrol">Push to Devices</span> operations failed
when an external dynamic list was configured to check for updates
every 5 minutes due to the commit and external dynamic fetch processes
overlapping.
</div>
</td>
</tr>
</tbody>
</table>