--- type: Addressed product: PAN-OS version: 11.1.9 --- ## PAN-290996 When performing an SNMP walk, the Connections Per Second (CPS) counters incorrectly return a value of 0 for each virtual system (VSYS), despite the firewall actively processing connections. ## PAN-286255 Fixed an issue where, when the firewall received an unexpected termination request for SSL sessions, the dataplane experienced a slow buffer resource leak. ## PAN-285941 Fixed an issue where high memory consumption occurred on the logrcvr process. ## PAN-284073 Fixed an issue on the firewall that caused commits to fail and the web interface to become inaccessible. ## PAN-283954 Fixed an issue where the configd process stopped responding due to a circular reference between address groups. ## PAN-283168 Fixed an issue related to syslog forwarding that caused the logrcvr process stopped responding. ## PAN-282697 Fixed an issue where traffic was delayed significantly when it used No Authentication Explicit Proxy and matched a decryption policy rule. ## PAN-282454 Fixed an issue where, when you added the Virtual System Name column under Unified Logs, the column did not remain visible in the table if you closed and re-opened the tab. ## PAN-282391 Fixed an issue on Panorama where a memory leak occurred after cloning a template, resulting in an increase in memory use, which caused OOM errors. ## PAN-282359 Fixed an issue where the Panorama web interface was slower than expected. ## PAN-282206 Fixed an issue where configuring Secure Web Gateway (SWG) in no-auth mode led to latency when no decryption policy rules or No-decrypt policy rules were present. ## PAN-282069 Fixed an issue on Panorama where Security policy rules were removed from device groups when you cloned or edited Security policy rules that used more than 63 characters. ## PAN-281885 Fixed an issue where, when exporting and importing CSV files, the hash values of pre-shared key variables set at template and template stack levels changed inconsistently, which resulted in both variables displaying the same hash value. ## PAN-281882 Fixed an issue where OSPF was redistributing connected routes beyond the intended loopback IP. ## PAN-281649 Fixed an issue where the index size limit was incorrectly calculated and indices rolled over earlier than expected, which resulted in high memory and OOM errors. ## PAN-281269 ```caveat PA-5220, PA-5250, and PA-5420 firewalls ``` Fixed an issue where the firewall management server memory usage continuously increased. ## PAN-280942 Fixed an issue where the logrcvr process stopped responding. ## PAN-280700 Fixed an Issue where commits failed with the error invalid IPv6 x:x - must be global/link-local unicast when the management IPv6 address had a specific value. ## PAN-280477 Fixed an issue on the web interface were you were unable to scroll up or down to view source zones in a NAT policy rule. ## PAN-279691 ```caveat Firewalls in active/passive HA configurations only ``` Fixed an issue where the firewall didn't synchronize IPSec SAs (security associations) to the passive firewall if the tunnel was not initially established by the active firewall. ## PAN-279647 Fixed an issue where threat names were displayed differently on the web interface and the exported CSV file. ## PAN-279621 Fixed an issue where processes stopped responding when HTTPS Forward traffic was run. ## PAN-279400 Fixed an issue where, when Restrict Certificate Extensions was enabled on decryption profiles, the basic constraints extension was overwritten incorrectly. ## PAN-279209 Fixed an issue where changes made to the management interface permitted IP address list in a global template were not pushed to the template stack or firewalls. ## PAN-279195 Fixed an issue on Panorama where Device Health displayed the device memory as 0%. ## PAN-279065 Fixed an issue where the firewall sent logs with connection succeeded to the syslog server every time a connection was established, which resulted in excessive logs. ## PAN-278190 Fixed an issue on Panorama where a scheduled report with SLS data had an invalid translated-query. ## PAN-277755 Fixed an issue that caused the request system private-data-reset CLI command to fail. ## PAN-277417 Fixed an memory leak issue related to TLS inbound decryption. ## PAN-277018 Fixed an issue where FTP data connections did not work for EPRT with Source IP + Port translation enabled on the firewall. ## PAN-276862 Fixed an issue on Panorama where the logd process stopped responding unexpectedly. ## PAN-276616 Fixed an issue on the firewall where half-duplex settings on Ethernet was not visible. ## PAN-276412 Fixed an issue where you were unable to download XML files from Panorama > Summary > Backups. ## PAN-274907 Fixed an issue on Panorama where Config Audit Commit Date displayed the timestamp of the configuration edit instead of the commit time. ## PAN-274750 Fixed an issue where the detailed log view in Panorama did not display all packet details for traffic logs received from the cloud. ## PAN-274726 Fixed an issue where Wildfire signature generation was enabled on all nodes in a cluster instead of only the active node. ## PAN-274569 Fixed an issue where the QSPF transceiver interface displayed an incorrect range figure on the temperature alarm. ## PAN-274314 ```caveat PA-1400 Series firewalls, PA-3400 Series firewalls, and PA-5400 Series firewalls only ``` Fixed an issue where, when the pan_task process restarted, control plane packets were dropped, which could impact LACP and pings to host interfaces. ## PAN-273870 Fixed an issue on the firewall where you were unable to local changes that were made via the web interface. ## PAN-273422 Fixed an issue where traffic failed when Inline cloud analysis (Advanced Threat Prevention) was enabled in the Anti-Spyware profile with the action set to anything other than allow or alert and the maximum latency condition was reached. ## PAN-273141 Fixed an issue where GlobalProtect clients experienced slow file transfer download throughput when passing through an IPSec tunnel. ## PAN-271701 Fixed an issue where Advanced Services, App-ID Cloud Engine (ACE), and Enhanced Application Log stopped working due to incorrect memory usage accounting, which caused memory usage to remain at 99% after an extended period of time. ## PAN-271498 ```caveat PA-7000 Series firewalls, PA-5200 firewalls, and PA-5400f firewalls in FIPS mode only ``` Fixed an issue where decrypted traffic repeatedly failed and frequent reboots were required. ## PAN-271273 Fixed an issue where dynamic update downloads failed when IPv6 firewalling was enabled on the firewall and both IPv4 and IPv6 were configured on the management interface. ## PAN-271175 Fixed an issue where the all_task process stopped responding with a SIGABRT. ## PAN-271151 Fixed an issue where the GlobalProtect client did not automatically initiate a Kerberos SSO connection after logging in to Windows. ## PAN-270192 Fixed an issue where Panorama did not display the management IP address of devices onboard via ZTP. ## PAN-269404 Fixed an issue where the firewall did not reset the maximum latency timer for hold mode. ## PAN-268705 Fixed an intermittent issue where the firewall failed to process FTP traffic after upgrading to PAN-OS 10.1.14. ## PAN-268614 Fixed an issue on the web interface where, when all rules were highlighted when a read-only admin user clicked the Highlight Unused Rules checkbox. ## PAN-267936 Fixed an issue where commits failed with a validation error when you changed the encryption level and re-encryption option on a Panorama managed firewall. ## PAN-267444 Fixed an issue where large file downloads or uploads failed or remained in an incomplete state when using DLP HTTP2 mirror mode. ## PAN-266589 Fixed an issue where the firewall was unable to generate a tech support file when management server debug was disabled. ## PAN-263465 Fixed an issue where the logrcvr process stopped responding due to a memory leak and buffer overrun. ## PAN-263270 Fixed an issue where, after a commit was performed from Strata Cloud Manager, the SD-WAN configuration containing BGP routes did not display on the hub firewall. ## PAN-263052 Fixed an issue where the request logdb migrate-to-panorama start end-time CLI command did not work as expected, and you were unable to resend logs from a firewall to Panorama or a log collector. ## PAN-260015 Fixed an issue on the firewall where the dataplane restarted due to insufficient allocation of memory buffers. ## PAN-259610 Fixed an issue where Wildfire content installation failed for WF-500B clusters when deployed from Panorama using the deployment schedule. ## PAN-255914 ```caveat VM-Series firewalls on Amazon Web Services (AWS) environments only ``` Fixed an issue where a newly bootstrapped firewall required a management server restart, relicensing, or license push from Panorama to invoke the device certificate. ## PAN-254524 Fixed an issue on Panorama where, when the Commit and Push button was clicked during a selective Commit and Push operation, the window stopped responding, which caused the operation to be delayed. ## PAN-253127 Fixed an issue where, after upgrading to PAN-OS 11.0.2-h3, the hardware pool DFLT became highly utilized, and the packet buffer gradually increased. ## PAN-249574 Fixed an issue where selective pushes failed due to a missing log collector reference. ## PAN-245064 ```caveat Multi-vsys firewalls only ``` Fixed an issue where commits failed on the firewall after selecting Export or push device config bundle on Panorama and a force push was required. ## PAN-238208 Fixed an issue where the firewall API returned inconsistent responses to a failed call using a valid API key. With this fix, the firewall returns the error Session is invalid if the session is not available for the cookie.