(PA-220 firewalls only) Fixed an issue where Device > Setup was not displayed on the web interface.

Fixed an issue where, when SSL decryption was enabled and Client Hello messages spanned multiple TCP segments, some SSL decrypted sessions failed.

Fixes a problem where Netflow User ID information was truncated to 31 characters.

Fixed an issue where traffic to websites failed on the Google Chrome web browser on Secure Web Gateway (SWG) nodes.

Fixed an issue where traffic that did not match a decryption policy rule, or matched a no-decrypt policy rule, failed when accumulation proxy was enabled and a Zone Protection profile was configured with syn-cookies enabled.

Fixed an issue where websites with a no-decrypt policy rule were decrypted in traffic log when using a Google Chrome browser with PQC enabled.

Fixed an issue where an out-of-memory (OOM) condition caused a firewall outage.

Fixed an issue on the firewall where DPDK allocated twice the amount of memory as requested for pre-allocation.

Fixed an issue where GlobalProtect failed to connect when using LDAP authentication with machine certificates with the error message You are not authorized to connect to GlobalProtect portal.

Fixed an issue on the Panorama web interface where the progress bar did not complete when importing a vulnerability profile configuration through an XML file.

Fixed an issue where the management plane DNS cache size was lower than expected.

Fixed an issue where the firewalls behind an Amazon Web Services (AWS) Gateway Load Balancer (GWLB) stopped responding when processing GENEVE packets with the reserved bit set.

(CN-Series firewalls only) Fixed an issue where commits failed with the error failed to handle CONFIG_UPDATE_START due to cfgdb files for the container not being symbolically linked to the cfgdb files on the virtual machine.

(Firewalls and Panorama appliances in FIPS-CC mode only) Fixed an issue where the authd process restarted if RADIUS PAP/CHAP authentication was used.

Fixed an issue where Internal Host Detection for IPv6 did not work after upgrading to a PAN-OS 10.2 release.

Fixed an issue on the firewall where newly added routes were not automatically sorted based on subnets when added to a redistribution profile.

(PA-5450 firewalls only) Fixed an issue where BFD sessions flapped intermittently.

(PA-7050 firewalls only) Fixed an issue where the Network Processing Card (NPC), Data Processing Card (DPC), and Log Forwarding Card (LFC) remained in a starting state after an unexpected power cycle.

(PA-450 firewalls only) Fixed an issue where specific routes were not advertised when BGP Aggregate was configured with the advertise filter.

Fixed an issue where the ikemgr process stopped responding with a SIGSEGV error.

Fixed an issue where a critical system log was generated for a SAML authenticated user whose username length was greater than 32 characters.

Fixed an issue where a large amount of group data caused serialization errors and prevented synchronization.

Fixed an issue where the CLI command debug user-id dump hip-based-profile-database-entry returned an incorrect value in the output for the total size of hip reports.

Fixed an issue where link flaps occurred on Panorama appliances in high-availability (HA) configurations.

Fixed an issue where the firewall did not match traffic to FQDN objects if the FQDN object contained uppercase characters.

Fixed an issue where sessions might end unexpectedly with the error resources-unavailable when the firewall incorrectly interprets the Content and Threat Detection (CTD) global packet queue as being full.

Fixed an issue where a large number of core files were generated, which caused the root partition to become full and the firewall to move into a non-functional state.

Fixed an issue where the GlobalProtect application configuration screen did not display all value names when a language other than English was selected.

Fixed an issue where Software Version in the device summary report exported from Panorama included HTML tags.

Fixed an issue where the CLI command debug device-telemetry on debug caused high CPU load.

(PA-5410 firewalls only) Fixed an issue where the management interface went down and an error message displayed in the show interface management CLI command output.