Issue ID	Description
PAN-233557	Fixed an issue where, after using Panorama to configure per policy persistent DIPP, downgrading the firewall using Panorama and then upgrading the firewall back to a later PAN-OS release, the global DIPP configuration was not successfully converted b ack to the per policy persistent DIPP rules.
PAN-230359	Fixed an issue where SAML authentication failed with the error message Failed to verify signature against certificate when ds:KeyName was in the IdP metadata.
PAN-227639	Fixed an issue where the ACC displayed an incorrect DNS-base application traffic byte count.
PAN-227376	Fixed an issue where a memory overrun caused the all_task process to stop responding.
PAN-227368	Fixed an issue where GlobalProtect users could not connect the app to a portal or gateway and GlobalProtect Clientless VPN users were unable to access applications when authentication took longer than 20 seconds.
PAN-226418	A CLI command was added to address an issue where long-lived sessions aged out even when there was ongoing traffic.
PAN-226198	Fixed an issue on Panorama where the configd process repeatedly restarted when attempting to make configuration changes.
PAN-225920	Fixed an issue where duplicate predict sessions didn't release NAT resources.
PAN-225886	Fixed an issue where if you enabled explicit proxy mode for the web proxy, intermittent errors and unexpected TCP reconnections may have occurred.
PAN-225169	Added a CLI command to view Strata Logging Service queue usage.
PAN-224772	Fixed a high memory usage issue with the mongodb process that caused an OOM condition.
PAN-224145	Fixed an issue in multi-vsys environments where, when Panorama was on a PAN-OS 10.2 release and the firewall was on a PAN-OS 10.1 release, commits failed on the firewall when inbound inspection mode was configured in the decryption policy rule.
PAN-223457	Fixed an issue where, if the number of group queries exceeded the Okta rate limit threshold, the firewall cleared the cache for the groups.
PAN-221126	Fixed an issue where email server profiles (Device > Server Profiles > Email and Panorama > Server Profiles > Email) to forward logs as email notifications were not forwarded in a readable format.
PAN-218555	Fixed an issue where the firewall did not receive dynamic address updates pushed from Panorama during initial registration to Panorama.
PAN-213931	Fixed an issue where the logrcvr process cache was not in sync with the mapping on the firewall.
PAN-206913	Fixed an issue where, when DHCPv6 client was configured on firewalls in active/passive HA configurations, releasing the IPv6 address from the client released the IPv6 address from only the active firewall.

Issue ID

Description

PAN-233557

Fixed an issue where, after using Panorama to configure per policy persistent DIPP, downgrading the firewall using Panorama and then upgrading the firewall back to a later PAN-OS release, the global DIPP configuration was not successfully converted b ack to the per policy persistent DIPP rules.

PAN-230359

Fixed an issue where SAML authentication failed with the error message Failed to verify signature against certificate when ds:KeyName was in the IdP metadata.

PAN-227639

Fixed an issue where the ACC displayed an incorrect DNS-base application traffic byte count.

PAN-227376

Fixed an issue where a memory overrun caused the all_task process to stop responding.

PAN-227368

Fixed an issue where GlobalProtect users could not connect the app to a portal or gateway and GlobalProtect Clientless VPN users were unable to access applications when authentication took longer than 20 seconds.

PAN-226418

A CLI command was added to address an issue where long-lived sessions aged out even when there was ongoing traffic.

PAN-226198

Fixed an issue on Panorama where the configd process repeatedly restarted when attempting to make configuration changes.

PAN-225920

Fixed an issue where duplicate predict sessions didn't release NAT resources.

PAN-225886

Fixed an issue where if you enabled explicit proxy mode for the web proxy, intermittent errors and unexpected TCP reconnections may have occurred.

PAN-225169

Added a CLI command to view Strata Logging Service queue usage.

PAN-224772

Fixed a high memory usage issue with the mongodb process that caused an OOM condition.

PAN-224145

Fixed an issue in multi-vsys environments where, when Panorama was on a PAN-OS 10.2 release and the firewall was on a PAN-OS 10.1 release, commits failed on the firewall when inbound inspection mode was configured in the decryption policy rule.

PAN-223457

Fixed an issue where, if the number of group queries exceeded the Okta rate limit threshold, the firewall cleared the cache for the groups.

PAN-221126

Fixed an issue where email server profiles (Device > Server Profiles > Email and Panorama > Server Profiles > Email) to forward logs as email notifications were not forwarded in a readable format.

PAN-218555

Fixed an issue where the firewall did not receive dynamic address updates pushed from Panorama during initial registration to Panorama.

PAN-213931

Fixed an issue where the logrcvr process cache was not in sync with the mapping on the firewall.

PAN-206913

Fixed an issue where, when DHCPv6 client was configured on firewalls in active/passive HA configurations, releasing the IPv6 address from the client released the IPv6 address from only the active firewall.