Add data for 10.2 issues, addressed and known
This commit is contained in:
@@ -0,0 +1,253 @@
|
||||
---
|
||||
type: Addressed
|
||||
product: PAN-OS
|
||||
version: 10.2.13-h7
|
||||
source: common-crawl
|
||||
crawl: CC-MAIN-2026-12
|
||||
---
|
||||
|
||||
## PAN-286255
|
||||
|
||||
Fixed an issue where, when the firewall received an unexpected termination request for SSL sessions, the dataplane experienced a slow buffer resource leak.
|
||||
|
||||
## PAN-283813
|
||||
|
||||
Fixed an issue on Panorama where the web interface performance was slower than usual when retrieving read-only configurations from Panorama.
|
||||
|
||||
## PAN-282394
|
||||
|
||||
Fixed an issue where a firewall was only able to display a maximum of 14 permitted IP addresses from a Panorama Template Variable.
|
||||
|
||||
## PAN-282236
|
||||
|
||||
Fixed an issue where large IPv6 packets were reassembled incorrectly on the firewall when the packets arrived fragmented over an IPv4 tunnel.
|
||||
|
||||
## PAN-279621
|
||||
|
||||
Fixed an issue where processes stopped responding when HTTPS Forward traffic was run.
|
||||
|
||||
## PAN-279400
|
||||
|
||||
Fixed an issue where, when **Restrict Certificate Extension**s was enabled on decryption profiles, the basic constraints extension was overwritten incorrectly.
|
||||
|
||||
## PAN-278150
|
||||
|
||||
Fixed an issue where the firewall removed the Authentication Key Identifier (AKID) from the certificate during SSL decryption, which caused Python 3.13 to fail with a certificate verification error.
|
||||
|
||||
## PAN-277417
|
||||
|
||||
Fixed an memory leak issue related to TLS inbound decryption.
|
||||
|
||||
## PAN-277234
|
||||
|
||||
Fixed an issue where a device group import resulted in a Security policy rule being created with **Application** set to **none**.
|
||||
|
||||
## PAN-277147
|
||||
|
||||
Fixed an issue where daily scheduled reports were not generated and emailed.
|
||||
|
||||
## PAN-276678
|
||||
|
||||
Fixed an issue where Panorama became unresponsive while performing a dynamic address update without a lock.
|
||||
|
||||
## PAN-275077
|
||||
|
||||
Fixed an issue where DNS Security intermittently logs malicious domain URLs as Alert instead of taking a Sinkhole action, even when configured to Sinkhole malicious DNS domains.
|
||||
|
||||
## PAN-274797
|
||||
|
||||
Fixed an issue where a DPC on slot 3 failed intermittently due to the pktlog_forwarding process restarting, which resulted in an unexpected HA failover.
|
||||
|
||||
## PAN-274726
|
||||
|
||||
Fixed an issue where Wildfire signature generation was enabled on all nodes in a cluster instead of only the active node.
|
||||
|
||||
## PAN-273964
|
||||
|
||||
Fixed an issue where SNMP scans to a firewall timed out after upgrading to a PAN-OS 10.2 release.
|
||||
|
||||
## PAN-273453
|
||||
|
||||
Fixed an issue where restarting the firewall did not initiate an autocommit job, which caused the firewall to stop responding and the HA interface to go down.
|
||||
|
||||
## PAN-273141
|
||||
|
||||
Fixed an issue where GlobalProtect clients experienced slow file transfer download throughput when passing through an IPSec tunnel.
|
||||
|
||||
## PAN-272959
|
||||
|
||||
Fixed an issue where the firewall generated BGP update packets larger than 1500 bytes when the interface MTU was 1500 bytes and jumbo frames were enabled globally.
|
||||
|
||||
## PAN-272395
|
||||
|
||||
Fixed an issue where informational logs caused the distributord process log file to be frequently overwritten.
|
||||
|
||||
## PAN-272175
|
||||
|
||||
Fixed an issue where session rematch caused ACE cloud application traffic to match the wrong policy.
|
||||
|
||||
## PAN-271425
|
||||
|
||||
```caveat
|
||||
Firewalls in active/active HA configurations only
|
||||
```
|
||||
|
||||
Fixed an issue with SSL inbound decryption on firewalls on a vwire setup with asymmetric routing.
|
||||
|
||||
To use this fix, enter the CLI command set system setting ssl-decrypt ha-vwire-mac-learn global ye s on both firewalls in an HA pair.
|
||||
|
||||
## PAN-271184
|
||||
|
||||
Fixed an issue where Device Telemetry failed due to an issue with the encoding of characters in the log file path.
|
||||
|
||||
## PAN-269956
|
||||
|
||||
Fixed an issue where the all_pktproc process stopped responding, which caused internal path monitor failures.
|
||||
|
||||
## PAN-269677
|
||||
|
||||
Fixed an issue where Panorama did not check for a NULL pointer when querying logs, which caused logs to not display on the web interface.
|
||||
|
||||
## PAN-269291
|
||||
|
||||
Fixed an issue where the scheduled report generation script did not return debug information.
|
||||
|
||||
## PAN-269106
|
||||
|
||||
Fixed an issue where the wifclient stopped responding during server certificate verification for MICA gRPC connections and caused the dataplane to restart when using a cloud-based ML detection engine (MICA). On certain platforms, this caused the firewall to reboot periodically.
|
||||
|
||||
## PAN-269052
|
||||
|
||||
Fixed an issue where traffic was blocked by a URL filtering profile even though the Security policy rule did not have a URL filtering profile configured.
|
||||
|
||||
## PAN-269027
|
||||
|
||||
Fixed an issue related to external dynamic lists that caused commit times on the firewall to be higher than expected.
|
||||
|
||||
## PAN-268951
|
||||
|
||||
Fixed a CPS counter query issue that caused SNMP polling timeouts on the firewall.
|
||||
|
||||
## PAN-268118
|
||||
|
||||
Fixed an issue on firewalls in active/passive HA configurations where, after a failover, irrelevant routing FIB entries were seen in the routing table on the newly active firewall.
|
||||
|
||||
## PAN-267707
|
||||
|
||||
Fixed an issue where BFD sessions did not come up even when BGP peering was established.
|
||||
|
||||
## PAN-267097
|
||||
|
||||
Fixed an issue where the replay database size increased significantly due to local and special configurations not being purged after commits.
|
||||
|
||||
## PAN-266900
|
||||
|
||||
Fixed an issue on the Panorama web interface where you were unable to click **OK** after selecting an install package type and file from the dropdown and selecting a firewall.
|
||||
|
||||
## PAN-265791
|
||||
|
||||
Fixed an issue where the all_task process stopped responding, which caused the dataplane to go down.
|
||||
|
||||
## PAN-265646
|
||||
|
||||
Fixed an issue where the config lock icon was not visible for a custom role-based admin when a Superuser admin had acquired the config lock.
|
||||
|
||||
## PAN-264708
|
||||
|
||||
Fixed an issue where a selective push was blocked when a configuration load was done.
|
||||
|
||||
## PAN-264678
|
||||
|
||||
Fixed an issue where **Preview Changes** did not display configuration changes in **Commit and push > Push Scope**.
|
||||
|
||||
## PAN-264169
|
||||
|
||||
```caveat
|
||||
PA-5400 Series firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue where the firewall sent correlated event logs to the syslog server using the management interface instead of the log interface.
|
||||
|
||||
## PAN-263654
|
||||
|
||||
Fixed an issue where multiple DNS responses with different CNAME values caused evasion false positive alerts.
|
||||
|
||||
## PAN-263559
|
||||
|
||||
Fixed an issue where the dataplane stopped responding and the firewall unexpectedly rebooted due to multiple process restarts.
|
||||
|
||||
## PAN-262729
|
||||
|
||||
```caveat
|
||||
Panorama appliances only
|
||||
```
|
||||
|
||||
Fixed an issue where the configd process experienced continuous high CPU utilization and repeatedly restarted.
|
||||
|
||||
## PAN-262540
|
||||
|
||||
Fixed an issue where application traffic transactions that reused TCP ports did not work with decryption.
|
||||
|
||||
## PAN-262383
|
||||
|
||||
Fixed an issue where the firewall was unable to decompress the HTTP2 header, which caused the session to be classified as unknown-tcp instead of web-browsing.
|
||||
|
||||
## PAN-260300
|
||||
|
||||
```caveat
|
||||
PA-5410, PA-5420, PA-5430, PA-5440 and PA-5445 firewalls only
|
||||
```
|
||||
|
||||
Fixed an issue related to the all_pktproc process where DPC slot 3 stopped responding.
|
||||
|
||||
## PAN-260131
|
||||
|
||||
Fixed an issue where Wildfire content installation failed for WF-500B clusters when deployed from Panorama using the deployment schedule.
|
||||
|
||||
## PAN-260015
|
||||
|
||||
Fixed an issue on the firewall where the dataplane restarted due to insufficient allocation of memory buffers.
|
||||
|
||||
## PAN-254577
|
||||
|
||||
Fixed an issue where a core file was created on the Log Forwarding Card due to a third-party software issue.
|
||||
|
||||
## PAN-249581
|
||||
|
||||
Fixed an issue where stale BGP routes were advertised to peers even when they were not present in the local RIB table.
|
||||
|
||||
## PAN-249011
|
||||
|
||||
Fixed an issue where the firewall became unresponsive when committing a configuration change with a large number of uncommitted changes in the replay database.
|
||||
|
||||
## PAN-241772
|
||||
|
||||
Fixed an issue where, when TLSv1.3 was used, an incorrect error message invalid padding was displayed instead of the expected error message Invalid server certificate.
|
||||
|
||||
## PAN-241126
|
||||
|
||||
Fixed an issue where the client IP address was incorrect in the authentication logs for Captive Portal authentication events when the client used IPv6.
|
||||
|
||||
## PAN-238594
|
||||
|
||||
Fixed an issue where the firewall rebooted when a QSFP28 cable was removed from the port while the port was passing traffic.
|
||||
|
||||
## PAN-237010
|
||||
|
||||
Fixed an issue on Panorama where local commits took longer than expected after an upgrade.
|
||||
|
||||
## PAN-233868
|
||||
|
||||
Fixed an issue where the firewall took an incorrect action for overlapping custom and edl-url-categories in a policy rule.
|
||||
|
||||
## PAN-233581
|
||||
|
||||
Fixed an issue on firewalls in active/active HA configurations where SYN+ACK packets of asymmetric TCP sessions were dropped because of a session synchronization issue.
|
||||
|
||||
## PAN-224833
|
||||
|
||||
Fixed an issue where the firewall dropped DHCPv6 relay packets if there were duplicate link-local addresses on different sub-interfaces.
|
||||
|
||||
## PAN-212735
|
||||
|
||||
Fixed an issue where sessions that were previously in sw-cut-through mode (software fast forwarding) and persisted after an HA failover were no longer subject to software fast forwarding, which led to increased dataplane CPU load after HA failover.
|
||||
Reference in New Issue
Block a user