Add remaining PAN-OS 11.1 addressed issues

2026-03-16 16:16:41 -05:00
parent f7373bd7a1
commit d1a554d974
39 changed files with 5527 additions and 0 deletions
@@ -0,0 +1,100 @@
+---
+type: Addressed
+product: PAN-OS
+version: 11.1.4-h25
+---
+
+## PAN-292261
+
+Fixed an issue where the firewall repeatedly reported an unreachable
+syslog server as back online when the
+server remained unavailable. This resulted in misleading alternating
+connection status messages in the system logs.
+
+## PAN-287423
+
+Fixed an issue where content loading issues occurred on IPv6 websites
+due to the firewall incorrectly setting the IPv6 header flow label
+to 0.
+
+## PAN-286255
+
+Fixed an issue where, when the firewall received an unexpected
+termination request for SSL sessions, the dataplane experienced a
+slow buffer resource leak.
+
+## PAN-282069
+
+Fixed an issue on Panorama where Security policy rules were removed
+from device groups when you cloned or edited Security policy rules
+that used more than 63 characters.
+
+## PAN-280942
+
+Fixed an issue where the logrcvr process stopped
+responding.
+
+## PAN-280698
+
+Fixed an issue where the firewall removed the TCP timestamp from
+client hello messages that did not fit in a single packet, which
+resulted in connection issues.
+
+## PAN-279901
+
+An issue was fixed where the firewall dropped fragmented TLS
+ClientHello packets, which blocked access to certain websites. This
+occurred because the packets arrived truncated, in varying sizes and
+orders, and the firewall's heuristics failed to handle them
+correctly.
+
+To enable this fix, run: debug dataplane set ssl-decrypt
+accumulate-client-hello disjoined yes.
+
+## PAN-273949
+
+Fixed an issue where the firewall generated the following error
+message in the snmpd logs:
+pan_get_keystr_from_cryptod(pan_snmpinterface.c:181):
+Key X2F1dGhfa2V5 import from cryptod failed.
+
+## PAN-271273
+
+Fixed an issue where dynamic update downloads failed when
+IPv6 firewalling was enabled on the
+firewall and both IPv4 and IPv6 were configured on the management
+interface.
+
+## PAN-270193
+
+Fixed an issue where the Panorama management server changed its
+certificate authority (CA) unexpectedly, which caused managed
+firewalls to disconnect.
+
+## PAN-268614
+
+Fixed an issue on the web interface where, when all rules were
+highlighted when a read-only admin user clicked the
+Highlight Unused Rules checkbox.
+
+## PAN-265621
+
+Fixed an issue where the restart option for
+IPSec tunnels was greyed out when you attempted to restart the
+tunnel from NetworkIPSec TunnelsIKE Info.
+
+## PAN-260300
+
+```caveat
+PA-5410, PA-5420, PA-5430, PA-5440 and PA-5445 firewalls only
+```
+
+Fixed an issue related to the
+all_pktproc process where DPC slot 3 stopped
+responding.
+
+## PAN-259535
+
+Fixed an issue where the firewall failed to boot up after running
+power cycle tests due to ehmon process heartbeat
+failures.