--- type: Addressed product: PAN-OS version: 11.1.4-h13 --- ## PAN-279604 Fixed an issue where scheduled SaaS application usage reports were generated incorrectly, and the login page was displayed instead of the report content. ## PAN-278088 Fixed an issue where the show system resources follow CLI command was not available. ## PAN-274791 Fixed an issue where the firewall rebooted when Shared Pool Type 32 was depleted and traffic matched advanced features. ## PAN-274592 ```caveat Firewalls in HA configurations only ``` Fixed an issue where the firewall did not fail over when the active firewall experienced data plane issues. ## PAN-273994 A fix was made to address [CVE-2025-0111](https://security.paloaltonetworks.com/CVE-2025-0111). ## PAN-273971 A fix was made to address [CVE-2025-0108](https://security.paloaltonetworks.com/CVE-2025-0108). ## PAN-273278 A fix was made to address [CVE-2025-0109](https://security.paloaltonetworks.com/CVE-2025-0109). ## PAN-273129 Fixed an issue on the web interface where the **negate** option was visible when you clicked on the rule name, but not when you viewed the target options from the **rulebase** attribute. ## PAN-273085 Fixed an issue on the web interface where you were unable to edit or create policy rules. ## PAN-273026 Fixed an issue where traffic logs did not display correctly when filters were applied. ## PAN-273019 Fixed an intermittent issue where SSL decryption failed. ## PAN-272959 Fixed an issue where the firewall generated BGP update packets larger than 1500 bytes when the interface MTU was 1500 bytes and jumbo frames were enabled globally. ## PAN-272006 Fixed an issue where the firewall did not trigger a kernel core dump as a large core when the CPLD (Complex Programmable Logic Device) sent a Non-Maskable Interrupt (NMI) to the CPU. ## PAN-271937 ```caveat PA-5450 firewalls only ``` Fixed an issue where the logrcvr process stopped responding when processing logs from a large number of sources. ## PAN-271926 Fixed an issue where TLS 1.3 decryption failed with a bad record MAC error when the firewall was configured to decrypt and inspect TLS traffic. ## PAN-270549 Fixed an issue where some TLS connections were not handled correctly, which led to instability in the dataplane. ## PAN-270471 ```caveat Firewalls in active/active configurations only ``` Fixed an issue where the firewall did not detect configuration changes when only the interface of an IKE gateway was changed, which caused IPSec tunnels to not come up after migrating the IKE gateway IP address from a subinterface to a physical interface. ## PAN-270077 ```caveat VM-Series firewalls in Amazon Web Services (AWS) environments only ``` Fixed an issue template values were missing in newly spun firewalls in auto scale deployments without an explicit push with forced template values from Panorama. ## PAN-269731 Fixed an issue where Panorama did not display logs from firewalls after upgrading to PAN-OS 10.2.11 on devices due to Elasticsearch (ES) getting restarted continuously. ## PAN-269539 Fixed an issue where whitespace was added before the timestamp in syslog logs forwarded from Panorama. ## PAN-269499 Fixed an issue where the firewall stopped responding when receiving a high number of logs. ## PAN-269106 Fixed issue where the wifclient restarted and multiple processes stopped responding. ## PAN-268909 Fixed an issue where IP address tags were removed from firewalls after a management server or useridd process restart. This occurred when a Panorama serial-number based configuration was used for User-ID redistribution. ## PAN-268815 Fixed an issue where the firewall entered a non-functional state due to duplicate entries in the shared memory. ## PAN-268727 Fixed an issue where traffic was dropped when the accumulation proxy was enabled and header insertion modified packets. ## PAN-267781 Fixed an issue where Panorama did not display the Source Dynamic Address Group. ## PAN-267762 ```caveat Panorama virtual appliances in Management-Only mode ``` Fixed a issue where the maximum configuration size was lower than expected. ## PAN-267671 Fixed an issue where the firewall rebooted unexpectedly due to the all_task process restarting with an OOM condition due to a memory leak on the reportd process. ## PAN-267430 Fixed an issue where Panorama was unable to return logs for queries that were longer than 64,000 characters. ## PAN-267097 Fixed an issue where the replay database size increased significantly due to local and special configurations not being purged after commits. ## PAN-266581 Fixed an issue where a failed SSL connection to a syslog server resulted in a /tmp/srvr.crt.xxxxxx file not being removed, which caused index node (inode) exhaustion. ## PAN-266559 Fixed an issue where partial commits failed when objects that were referenced in a high number of Security policy rules were renamed. ## PAN-266354 Fixed an issue where Hybrid-SWG explicit proxy connections failed when the number of destination domains exceeded 1024. ## PAN-265745 Fixed an issue where the firewall displayed incorrect MAC receive error counters for VMWare devices hosted in ESXi. ## PAN-265179 Fixed an issue where a kernel race condition caused the firewall to reboot with a kernel panic. ## PAN-265160 Fixed an issue where the firewall created multiple connections to a syslog server and remained in the FINWAIT1 state, which caused logs to drop while being forwarded to the syslog server. ## PAN-264369 Fixed an issue where the **7 Day Threat Report** was empty in the scheduled reports sent via email. ## PAN-263291 Fixed an issue where Microsoft Outlook did not work as expected when the GlobalProtect clientless VPN was configured. ## PAN-262627 Fixed an issue where the firewall rebooted into maintenance mode due to a service failure in the configd process. ## PAN-262383 Fixed an issue where the firewall was unable to decompress the HTTP2 header, which caused the session to be classified as unknown-tcp instead of web-browsing. ## PAN-262254 Fixed an issue where the firewall experienced an OOM condition and the useridd process stopped responding, which caused the firewall to drop interfaces from their respective aggregate groups. ## PAN-261998 Fixed an issue where the firewall configuration process restarted during an External Dynamic List refresh or a commit and push operation. ## PAN-260290 Fixed an issue for fixed model licenses to support new content size requirements by reducing the total sessions supported to be equivalent to their flex memory counterpart ## PAN-260149 Fixed an issue where the management plane DNS cache size was lower than expected. ## PAN-259055 Fixed an issue where the firewall stopped responding when receiving SNMPv3 traps. ## PAN-258996 Fixed an issue where the firewall displayed the SFP ports as PowerDown when the SFP transceiver was removed and reinserted or the port was shut down and brought back up on the peer device. ## PAN-257390 ```caveat PA-5250 firewalls only ``` Fixed an issue where the logrcvr process stopped responding due to a segmentation fault. ## PAN-256669 Fixed an issue where the memory usage reported by SNMP did not match the memory usage reported by the top command. ## PAN-255773 Fixed an issue where errors related to applications in **Content-preview** caused commit failures. ## PAN-255747 Fixed an issue on the firewall where CLI commands returned Server error: op command for client dagger timed out as client is not available. ## PAN-255653 Fixed an HA failover issue where, when Management Processing Card (MPC) or Base Card (BC) failures occurred, the HA link went down, which caused fpp-down events on one firewall. ## PAN-253485 ```caveat Firewalls in active/passive HA configurations only ``` Fixed an issue where dataplane packet capture filter configuration failed on the active firewall with the error op command for client dagger timed out as client is not available. ## PAN-252669 Fixed an issue where the ikemgr process stopped responding with a SIGSEGV error. ## PAN-252036 Fixed an issue where, when the GlobalProtect portal was not configured, accessing the GlobalProtect gateway still loaded a portal malformed page. ## PAN-252224 Fixed an issue where Panorama did not forward logs to a syslog server over an SSL connection using CRL as a revocation verification method. ## PAN-250585 Fixed an issue where the firewall CPU use increased after upgrading from PAN-OS 10.2.4-h4 to PAN-OS 10.2.8 due to a change in system resource reporting by the REST API. ## PAN-246209 Fixed an issue where IPSec VPN tunnels went down after receiving a DHCP server message that the DHCP client cleared the IP address on the interface. ## PAN-242739 Fixed an issue on the firewall where the dataplane repeatedly restarted. ## PAN-240225 Fixed an issue where authentication failed on web-based GlobalProtect portal. ## PAN-238594 Fixed an issue where the firewall rebooted when a QSFP28 cable was removed from the port while the port was passing traffic. ## PAN-232833 Fixed an issue where the following error message displayed for IoT trial licenses: IoT Security license is required for the feature to function. ## PAN-232550 Fixed an issue where SNMPv3 authentication failed when using SHA-512 Auth protocol. ## PAN-225228 Fixed an issue where filtering threat logs using any value under **THREAT ID/NAME** displayed the error **Invalid term**. ## PAN-218873 Fixed an issue where a HIP mask was reused when an existing IP address user mapping was updated by a new IP address user mapping that had a different username but the same IP address. ## PAN-216054 Fixed an issue that caused the firewall's fan speed to increase while it was idle. ## PAN-214430 Fixed an issue where some commands did not have executable permissions. ## PAN-212197 Fixed an issue where you were able to create local administrator usernames that contained only numbers. ## PAN-207972 Fixed an issue on the web interface where the BGP routing table did not display advertised routes. ## PAN-193285 Fixed an issue where the policy optimizer feature did not add entries back to the mongodb database after removing them during an upgrade or downgrade.