--- type: Addressed product: PAN-OS version: 10.1.10 source: common-crawl crawl: CC-MAIN-2026-12 --- ## PAN-217431 ```caveat PA-5400 Series firewalls with DPC (Data Processing Cards) only ``` Fixed an issue with slot 2 DPCs where URL Filtering did not work as expected after upgrading to PAN-OS 10.1.9. ## PAN-217284 Fixed an intermittent issue where an LACP flap occurred when the LACP transmission rate was set to **Fast**. ## PAN-216996 Fixed an issue where, after upgrading Panorama to PAN-OS 10.1.9, multiple User-ID alerts were generated every 10 minutes. ## PAN-216710 Fixed an issue with firewalls in active/active HA configurations where GlobalProtect disconnected when the original suspected active-primary firewall became active-secondary. ## PAN-216656 Fixed an issue where the firewall was unable to fully process the user list from a child group when the child group contained more than 1,500 users. ## PAN-216366 Fixed an issue where, when custom signatures used a certain syntax, false positives were generated on devices on a PAN-OS 10.0 release. ## PAN-215503 Fixed a memory related issue where the MEMORY_POOL address was mapped incorrectly ## PAN-215125 Fixed an issue where false negatives occurred for some script samples. ## PAN-215023 ```caveat PA-400 Series firewalls only ``` Fixed an issue where the firewall did not boot up successfully and an Amber LED light was shown. ## PAN-214624 Fixed an issue where the logrcvr process stopped responding. ## PAN-213463 ```caveat PA-5200 Series firewalls only ``` Fixed an issue where unplugging a PAN-SFP-CG transceiver from an interface with its link speed setting set to 1000 caused the firewall to incorrectly read that interface as up. ## PAN-212848 Fixed an issue where attempting to change the disk-usage cleanup threshold to 90 resulted in the error message Server error : op command for client dagger timed out as client is not available. ## PAN-212530 Fixed an issue on log collectors where the root partition reached 100% utilization. ## PAN-211997 Fixed an issue where large OSPF control packets were fragmented, which caused the neighborship to fail. ## PAN-211602 Fixed an issue where, when viewing a WildFire Analysis report via the web interface, the **detailed log view** was not accessible if the browser window was resized. ## PAN-211441 Fixed a memory leak issue related to SSL crypto operations that resulted in failed commits. ## PAN-211422 Fixed an issue where the show session packet-buffer-protection buffer-latency CLI command randomly displayed incorrect values. ## PAN-211242 Fixed an issue where missed heartbeats caused the Data Processing Card (DPC) and its corresponding Network Processing Card (NPC) to restart due to internal packet path monitoring failure. ## PAN-211150 Fixed an issue on Panorama where users with custom admin roles were incorrectly unable to view SSH profiles even when it was permitted in the custom role. ## PAN-210921 ```caveat Panorama appliances in Legacy Mode only ``` Fixed an issue where **Blocked Browsing Summary by Website** in the user activity report contained scrambled characters. ## PAN-210919 Fixed an issue where the Data Processing Card remained in a Starting state after a restart. ## PAN-210738 Fixed an issue where fragmented UDP packets were dropped. ## PAN-210661 Fixed an issue where firewalls disconnected from Strata Logging Service due to a missing key file after renewing the device certificate. ## PAN-210654 Fixed an issue with firewalls on active/passive HA configurations GlobalProtect where users were disconnected after HA failover. ## PAN-210563 Fixed an issue on Panorama where Security policy rules with a **Tag** target did not appear in the pre-rule list of a Dynamic Address Group that was part of the tag. ## PAN-210397 Fixed an issue on Panorama where VM-Series firewalls in HA configurations hosted on Amazon Web Services (AWS) were not displayed under **Deploy Master Key**. ## PAN-210236 Fixed an issue where the **Templates** list was not displayed under the **Location** drop-down for commit or configuration locks. ## PAN-210216 A debug command was added to address an issue with firewalls in high availability configurations. ## PAN-210158 ```caveat CN-Series firewalls only ``` Fixed an issue where the dataplane stopped responding after a container restart. ## PAN-210000 Fixed an issue where, when traffic and threat logs exceeded the threshold of 90% total allowed size, alarms were not generated for other log types. ## PAN-209872 Fixed an issue where dataplane ports responded to ICMP requests fewer than 64 bytes with nonzero padding bytes in the ICMP response. ## PAN-209696 Fixed an issue where link-local address communication for IPv6, BFD, and OSPFv3 neighbors was dropped when IP address spoofing check was enabled in a Zone Protection profile. ## PAN-209683 Fixed an issue where Panorama was unable to retrieve IP address-to-username mapping from a firewall on a PAN-OS 8.1 release. ## PAN-209617 Fixed an issue with firewalls in active/passive HA configurations where the passive firewall created an incorrect SCTP association due to the HA sync messages from the active firewall having an incorrect value. ## PAN-209501 Fixed an issue where the GlobalProtect logdb quota was not displayed in the show system logdb quota output. ## PAN-209491 Fixed an issue on the web interface where the **Session Expire Time** displayed a past date if the device time was in December. ## PAN-209375 Fixed an issue on the firewall where log filtering did not work as expected. ## PAN-209108 Fixed an issue where a Panorama in Management Only mode was unable to display logs from log collectors due to missing schema files. ## PAN-208930 ```caveat PA-7000 Series firewalls only ``` Fixed an issue where autotagging in log forwarding did not work. ## PAN-208902 Fixed an issue where, when a client sent a TCP/FIN packet, the firewall displayed the end reason as aged-out instead of tcp-fin. ## PAN-208877 Fixed an issue where the all_task process stopped responding when freeing the HTTP/2 stream, which caused the dataplane to go down. ## PAN-208792 Fixed an issue where authentication failed when the service route for RADIUS traffic was configured as **use default** for IPv4 addresses and included the dataplane interface as the destination route. ## PAN-208526 Fixed an issue where API calls did not display tunnel info. ## PAN-208485 Fixed an issue where NAT policies were not visible on the CLI if they contained more than 32 characters. ## PAN-208438 Fixed an issue on Panorama where Security policy rules incorrectly displayed as disabled. ## PAN-208325 ```caveat PA-5400 Series, PA-3400 Series, PA-400 Series only, and PA-5450 firewalls only ``` Fixed an issue where the firewall was unable to automatically renew the device certificate. ## PAN-208316 Fixed an issue where user-group names were unable to be configured as the source user via the test security-policy-match command. ## PAN-208240 Fixed an issue where, when attempting to replace an existing certificate, importing a new certificate with the same name as the existing certificate failed due to mismatched public and private keys. ## PAN-208210 Fixed an issue where changes to the syslog server configuration were not applied without first restarting the management server. ## PAN-208201 Fixed an issue on the firewall where the modified date and time was incorrectly updated after a commit operation, PAN-OS upgrade, or reboot. ## PAN-208189 Fixed an issue when traffic failed to match and reach all destinations if a Security policy rule includes FQDN objects that resolve to two or more IP addresses. ## PAN-208187 Fixed an issue where REST API requests did not work for GlobalProtect gateway tunnels. ## PAN-208039 ```caveat PA-7000 Series firewalls with SMC-B only ``` Fixed an issue where the details of configuration changes were not included in configuration logs on the syslog server. ## PAN-207741 Fixed an issue where Large Scale VPN (LSVPN) Portal authentication failed with the error invalid http response. return error(Authentication failed; Retry authentication when the satellite connected to more than one portal. ## PAN-207663 Fixed a Clientless VPN issue where JSON stringifies caused issues with the application rewrite. ## PAN-207661 Fixed an issue with firewalls in active/active HA configurations where the virtual floating IP address configuration under a Panorama template was overridden and displayed From Template Override: undefined as a source. ## PAN-207577 Fixed an issue where **Panorama > Setup > Interfaces** was not accessible for users with custom admin roles even when the interface option was selected for the custom admin roles. ## PAN-207562 Fixed an issue where the shard count displayed by the show log-collector-es-cluster health CLI command was higher than the recommended limit. The recommended limit can be calculated with the formula 20*heap-memory*no-of-data-nodes. ## PAN-207400 Fixed an issue on Octeon based platforms where fragmented VLAN tagged packets dropped on an aggregate interface. ## PAN-206640 Fixed an issue where the ikemgr process stopped responding, which caused IPSec tunnels to go down. ## PAN-206396 Fixed an issue where HIP report flip and HIP check failed when a user was part of multiple user groups with different domains. ## PAN-206333 Fixed an issue where the **Include/Exclude IP** filter under **Data Distribution** did not work correctly. ## PAN-206268 Fixed an issue where an authentication key field, even though not supported, was enabled under the **Device** tab on Panorama. ## PAN-206221 Fixed an issue where scheduled configuration pushes with **Include Device and Network Templates** selected did not work. ## PAN-206128 ```caveat PA-7000 Series firewalls with NPCs (Network Processing Cards) only ``` Improved debugging capability for an issue where the firewall restarted due to heartbeat failures and then failed with the following error message: Power not OK. ## PAN-205995 Fixed an issue where logs from unaffected log collector groups were not displayed when a log collector was down. ## PAN-205955 Fixed an issue where RAID rebuilds occurred even with healthy disks and a clean shutdown. ## PAN-205829 Fixed an issue where logs did not display **Host-ID** details for GlobalProtect users despite having a quarantine Security policy rule. This occurred due to a missed local cache lookup. ## PAN-205804 Fixed an issue on Panorama where a WildFire scheduled update for managed devices triggered multiple UploadInstall jobs per minute. ## PAN-205513 Fixed an issue where the stats dump file generated by Panorama for a device firewall differed from the stats dump file generated by the managed device. ## PAN-205451 Fixed an issue where the pan_com process stopped responding due to aggressive commits. ## PAN-205369 Fixed an issue where connections to Strata Logging Service were initialized from the firewall even when Strata Logging Service forwarding was disabled. ## PAN-205337 Fixed an issue in the **Run Now** section of custom reports where **Threat/Content Name** displayed in hypertext, and hovering over the text with the mouse displayed the message undefined. ## PAN-205086 Fixed an issue where DNS Security categories were able to be deleted from spyware profiles. ## PAN-204987 Fixed an issue where the firewall changed sequence numbers for reused sessions. ## PAN-204718 ```caveat PA-5200 Series firewalls only ``` Fixed an issue where, after upgrading to PAN-OS 10.1.6-h3, a TACACS user login displayed the following error message during the first login attempt: Could not chdir to home directory /opt/pancfg/home/user: Permission denied. ## PAN-204683 Fixed an issue where logs were unable to be generated due to old logs not getting purged and /opt/panlogs reaching over 100% usage. ## PAN-204420 ```caveat WF-500 appliances only ``` Fixed an issue where, after an upgrade to a PAN-OS 10.1 release, SNMP traps were not sent to the SNMP server. This occurred due to SNMP trap server settings not being enabled. ## PAN-204233 Fixed an issue where, when the firewall received a 513 error from the WildFire cloud, the firewall attempted to repeatedly send the same file. ## PAN-203663 Fixed an issue where administrators were unable to change the password of a local database for users configured as a local admin user via an authentication profile. ## PAN-203655 Fixed an issue where enabling **event-specific traps** (**Device** > **Setup** > **Operations** > **Miscellaneous** > **SNMP Setup**), the new deviating device system logs included incorrect information. ## PAN-203339 Fixed an issue where services failed due to the RAID rebuild not being completed on time. ## PAN-203137 ```caveat PA-5450 firewalls only ``` Fixed an issue where HSCI ports did not come up when QSFP DAC cables were used. ## PAN-202981 Fixed an issue on Panorama where global find did not return results for existing universally unique identifiers (UUID). ## PAN-201855 Fixed an issue where, after cloning a template, a certificate with the block private key option enabled was corrupted. ## PAN-201839 Fixed an issue where GlobalProtect HIP matches failed for Mac users due to invalid characters being present in the subject alternative attributes in the certificate on the HIP report. ## PAN-201721 Fixed an issue with firewalls in HA configurations where HA setup generated the error mismatch due to device update during a content update even though the version was the same. ## PAN-201601 Fixed an issue where the all_task process stopped responding after adding customer hyperscan signatures. ## PAN-201561 Fixed an issue where LSVPN satellite authentication cookies were not synced across high availability LSVPN portals. ## PAN-201466 Fixed an issue where the system log generated on GlobalProtect satellite did not provide the reason for failures to connect to the GlobalProtect portal or gateway. ## PAN-201085 ```caveat PA-5450 firewalls only ``` Fixed an issue where inserting the NPC and DPC on slot2 created excessive logs in the bcm.log file. ## PAN-200676 Fixed an issue with firewalls in active/passive HA configurations where the user counts in the management plane were not synchronized between the active and the passive firewall. ## PAN-200356 Fixed an issue where the **Elapsed seconds** field incorrectly displayed as 0 for DHCP packets coming from the firewall. ## PAN-199687 Fixed an issue where content updates failed when using prelicensed keys during the bootstrap process. ## PAN-199557 Fixed an issue on Panorama where virtual memory usage exceeded the set limit, which caused the configd process to restart. ## PAN-198693 Fixed an issue where decrypted SSH sessions were interrupted with a decryption error. ## PAN-198453 Fixed an issue where you were unable to resize the **Description** pop-up window (**Policies > Security > Prerules**). ## PAN-198333 Fixed an issue where the SaaS PDF report incorrectly displayed the sanctioned application tag count as 1. ## PAN-198043 Fixed a rare issue where a BuildXmlCache job failed on the firewall. ## PAN-197388 Fixed an issue where, when the firewall forwarded Threat logs via email, the email client truncated the sender and recipient email addresses when they were put between angle brackets (<, >). ## PAN-197115 Fixed an issue where, when the total number of in-used HIP Profiles was greater than 32, traffic from the GlobalProtect Agent did not hit the expected Security policy rule configured with the HIP Profile even though a HIP Match log was generated. ## PAN-196597 Fixed an issue where the dnsproxyd process stopped responding due to corruption. ## PAN-196417 ```caveat PA-7000 Series firewalls only ``` Fixed an issue where firewalls experienced slow SNMP responses, which caused the SNMP server to time out before polling completion. ## PAN-196345 Fixed an issue where scheduled dynamic content updates failed to be retrieved by managed firewalls from Panorama when connectivity was slow. ## PAN-196003 Fixed an issue where the **Adjust Columns** options for Panorama Traffic logs did not correctly autoadjust the columns. ## PAN-195251 Fixed an issue where IPSec tunnel re-keying generated the critical log message tunnel-status-up. ## PAN-194805 Fixed an issue where scheduled configuration backups to the SCP server failed with the error message No ECDSA host key is known. ## PAN-193710 Fixed an issue where running the show interface CLI command caused the pan_comm process to stop responding during a configuration change. ## PAN-193521 Fixed an issue where **Panorama > Device > Deployment > Software** did not display software after running **check now** for managed devices. ## PAN-192739 Fixed an issue where the error message Machine Learning found virus was displayed in threat CSV logs as **Threat ID/Name** when WildFire Inline ML detected malware. ## PAN-192681 Fixed an issue where HIP database storage on the firewall reached full capacity due to the firewall not purging older HIP reports. ## PAN-192417 Fixed an issue where botnet reports were not generated on the firewall. ## PAN-190903 Fixed an issue where MAC addresses in threat capture were swapped between the source MAC and destination MAC addresses. ## PAN-189442 Fixed an issue where the all_pktproc process stopped responding, which caused the firewall to reboot. ## PAN-189395 ```caveat PA-400 Series firewalls only ``` Fixed an issue where running a PAN-OS 10.2 release caused dataplane processes to restart unexpectedly. ## PAN-189441 Fixed an issue where the pan_comm process repeatedly restarted, which caused commits to fail. ## PAN-189423 Fixed an issue where exporting correlation logs generated an empty file. ## PAN-189196 Fixed an issue on the firewall where the DHCP server did not send DHCP NAK packets correctly when **Served Addresses** were configured. ## PAN-188403 Fixed an issue on the web interface where the interzone-default rule hit count was not displayed. ## PAN-187253 ```caveat PA-400 Series firewalls only ``` Fixed an issue where the *all_task* process stopped repsonding. ## PAN-186956 Fixed an issue where SD-WAN DIA VIF did not become active if default gateways for the member interface did not respond to pings. ## PAN-186412 Fixed an issue where invalid packet-ptr was seen in work entries. ## PAN-186182 Fixed an issue where software buffer 3 was depleted when URL proxy was enabled and SSL sessions were decrypted to inject the block page. This issue occurred when an HTTP/2 block page was displayed for a large POST request. ## PAN-185770 Fixed an issue where the firewall displayed the error message Malformed Request when an email address included an ampersand ( & ) when configuring an Email server profile. ## PAN-182689 Fixed an issue where a signature from a previous WildFire package triggered malware detection even though the signature was no longer present in the current WildFire package. ## PAN-180655 Fixed an issue where FTP connections failed when SSL Inbound Inspection was enabled and a Security Profile was attached to the FTP connection allow policy rule. ## PAN-172977 Fixed an issue where session offloading did not occur on a tap interface under a high packet load. ## PAN-172806 Fixed an issue that the logrcvr process crashes during the firewall reboots. ## PAN-170414 Fixed an issue related to an OOM condition in the dataplane, which was caused by multiple panio commands using extra memory. ## PAN-168102 Fixed an issue where the API format to check heap usage of a node showed a JSON error.