aaron.axvig/firewallissues
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add releases from today
Test and deploy / deploy (push) Successful in 37s
Details

Browse Source
This commit is contained in:
aaron.axvig
2026-07-30 11:22:08 -05:00
parent cb6ce0b3c5
commit a538c8959d
3 changed files with 403 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
reference/PAN-OS/addressed/11.1.6-h36.html
+75
View File
@@ -0,0 +1,75 @@
<table class="table colsep rowsep table-striped">
<!--cq:include script="../../common/tablestack.jsp" /-->
<colgroup>
<col style="width: 25%" />
<col style="width: 75%" />
</colgroup>
<thead class="thead">
<tr class="row">
<th class="entry">
<div class="p">Issue ID</div>
</th>
<th class="entry">
<div class="p">Description</div>
</th>
</tr>
</thead>
<tbody class="tbody">
<tr class="row rowsep">
<td class="entry"><div class="p">PAN-323501</div></td>
<td class="entry relcol">
<div class="p">
Fixed an issue where SWG Explicit Proxy Kerberos authentication bypass
did not occur for some URLs that matched a configured URL category.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry"><div class="p">PAN-314776</div></td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the
<a
class="term"
href="#"
title=""
data-scope=""
data-format="dita"
data-type=""
target="_self"
>configd</a
>
process stopped responding after pushing configuration changes from
Panorama to the firewall.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry"><div class="p">PAN-312618</div></td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the firewall was unable to activate GlobalProtect
client software and displayed
<span class="ph systemoutput">SW LIMIT</span> messages related to
max-profiles and unsupported major and minor versions in the downgrade
list, which prevented successful software installation.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry"><div class="p">PAN-307933</div></td>
<td class="entry relcol">
<div class="p">
(<tt class="ph tt">Panorama appliances in Log Collector mode only</tt
>) Fixed an issue where the log collectors became unstable for an
extended period of time when receiving large amounts of traffic.
</div>
</td>
</tr>
</tbody>
</table>
reference/PAN-OS/addressed/11.2.10-h13.html
+192
View File
@@ -0,0 +1,192 @@
<table class="table colsep rowsep table-striped">
<!--cq:include script="../../common/tablestack.jsp" /-->
<colgroup>
<col style="width: 25%" />
<col style="width: 75%" />
</colgroup>
<thead class="thead">
<tr class="row">
<th class="entry">
<div class="p">Issue ID</div>
</th>
<th class="entry">
<div class="p">Description</div>
</th>
</tr>
</thead>
<tbody class="tbody">
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-326705</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where high CPU utilization occurred on one of the CPU
cores.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-325002</b></div>
</td>
<td class="entry relcol">
<div class="p">
(<tt class="ph tt"
>Google Cloud NGFW Enterprise VM-Series firewalls only</tt
>) Fixed an issue where the HTTP2 threat logs did not include VPC ID,
Security_key, and Endpoint ID.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-323485</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where multicast radio RTP based traffic was dropped
after an upgrade when the firewall performed Cloud Inline inspection,
which led to an exceeded session queue for Cloud Threat Detection.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-318106</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where SCM did not update device telemetry for the
firewall after upgrading to an affected release.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-317068</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on the Panorama web interface where you were able to
enable IPv6 for IKE gateways and IPSec tunnels even when IPv6 WAN was
disabled, which resulted in an invalid configuration. To utilize this
fix, upgrade to the latest Panorama plugin.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-314624</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the
<span class="ph systemoutput">useridd</span> process became
unresponsive and restarted when attempting to dump the Host
Information Profile (HIP) database via CLI while the system was
actively processing HIP reports. This was caused by a lock contention.
With this fix, the process now operates as expected under these
conditions.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-313827</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where a memory leak occurred related to the
<span class="ph systemoutput">reportd</span> process when custom
reports were run via API.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-304840</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where multiple firewalls experienced high management
CPU utilization after upgrading to an affected release due to repeated
index regeneration occurring every 15 minutes, which caused periodic
CPU spikes above 90%.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-303156</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the session timer for a custom application did
not transition from the initial 3-way handshake timer to the
application timeout when out-of-order 3-way handshake packets were
detected.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-298788</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the /pancfg partition on the Azure Cloud NGFW
reached 100% utilization, which caused commit failures.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-293707</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the
<a
class="term"
href="#"
title=""
data-scope=""
data-format="dita"
data-type=""
target="_self"
>iotd</a
>
process failed to install DPI Cloud server FQDN due to a configuration
parsing failure, caused by the configuration XML memory buffer not
being NULL terminated. This resulted in the accumulation of EAL logs
and DLP forwarding being stopped.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-266843</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on airgapped firewalls where cloud connection errors
flooded the system logs.
</div>
</td>
</tr>
</tbody>
</table>
reference/PAN-OS/addressed/11.2.7-h19.html
+136
View File
@@ -0,0 +1,136 @@
<table class="table colsep rowsep table-striped">
<!--cq:include script="../../common/tablestack.jsp" /-->
<colgroup>
<col style="width: 25%" />
<col style="width: 75%" />
</colgroup>
<thead class="thead">
<tr class="row">
<th class="entry">
<div class="p">Issue ID</div>
</th>
<th class="entry">
<div class="p">Description</div>
</th>
</tr>
</thead>
<tbody class="tbody">
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-326705</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where high CPU utilization occurred on one of the CPU
cores.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-318619</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where Geneve ingress traffic did not use the correct
public IP address for return traffic.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-316937</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where GlobalProtect users intermittently received
incorrect private IP addresses after connecting to a gateway behind a
Network Load Balancer (NLB).
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-312725</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where no warning message was displayed during commits
for improperly formatted FQDN or IP address values in the
GlobalProtect Enforcer configuration. This fix requires a compatible
content version on the firewall.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-304840</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where multiple firewalls experienced high management
CPU utilization after upgrading to an affected release due to repeated
index regeneration occurring every 15 minutes, which caused periodic
CPU spikes above 90%.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-303156</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the session timer for a custom application did
not transition from the initial 3-way handshake timer to the
application timeout when out-of-order 3-way handshake packets were
detected.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-298788</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue where the /pancfg partition on the Azure Cloud NGFW
reached 100% utilization, which caused commit failures.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-292242</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an intermittent issue where traffic logs were truncated when
they were forwarded using a TCP syslog configuration due to the
forwarding queue capacity being exceeded.
</div>
</td>
</tr>
<tr class="row rowsep">
<td class="entry">
<div class="p"><b class="ph b">PAN-266843</b></div>
</td>
<td class="entry relcol">
<div class="p">
Fixed an issue on airgapped firewalls where cloud connection errors
flooded the system logs.
</div>
</td>
</tr>
</tbody>
</table>