Fixed an issue where communication with Microsoft Azure services was disrupted, which resulted in application outages. This occurred when firewalls dropped SYN-ACK packets that were part of a SYN-ACK cookie mechanism activated by Azure's DDoS mitigation. With this fix, firewalls now maintain connectivity during such traffic events.

Fixed an issue where IP addresses configured for Source Address Exclusions in a Zone Protection Profile within a template stack did not save correctly. With this fix, the IP addresses save as expected.

Fixed an issue where a Security policy rule configured in the Shared device group on Panorama was not displayed in the web interface for a child device group, which caused a discrepancy between the displayed configuration and the actual deployed configuration on the associated device. With this fix, the user interface accurately reflects the deployed security policy rules.

Fixed an issue where ACE applications did not match the correct Security policy rules when the service was not set to Application Default after an upgrade, which caused traffic to be incorrectly denied.

Fixed an issue where an expired SD-WAN license caused SD-WAN tunnels to become unavailable, which resulted in traffic interruptions. With this fix, the device provides logs and commit messages about expired licenses.

(Prisma Access Gateways only) Fixed an issue where the global management plane stopped responding, which caused SSH and HTML disconnections, HIP database lookup failures, and significantly slower SCM commits. This occurred when egress IP allow listing was enabled in SCM and changes were made to EDLs.

Fixed an issue where multiple EDL fetches were queued and did not complete.

Fixed an issue on Panorama where Apps Seen was not updated in Security policy rules even when the firewall correclty recorded the **Last App Seen* timestamp and Panorama received monitor logs.

Fixed an issue where committing a scheduled configuration push on Panorama caused the configd process to stop responding unexpectedly.

Fixed an issue where a memory leak related to the useridd process on the passive device led to an OOM condition.

Fixed an issue on Prisma Access Remote Network firewalls where high CPU utilization caused slowness and command timeouts.

(Panorama appliances in Log Collector mode only) Fixed an issue where the log collectors became unstable for an extended period of time when receiving large amounts of traffic.

Fixed an issue where the useridd process stopped responding during user-id-agent configuration when the SSL context was not properly initialized to NULL after being freed.

Fixed an issue where, when you used a syslog forwarding profile with the CEF format, an additional string was appended to the end of the log message when viewing the log entry from the Universal Forwarder directory.

Fixed an issue where SSH/SFTP traffic was intermittently blocked by URL filtering due to the firewall incorrectly applying URL categories from previous sessions.

Fixed an issue where repeated unexpected terminations of a system component would cause the Data Plane to restart. With this fix, the Data Plane maintained stability.