(PA-7080 appliances with LPCs only) Fixed an issue where syslog forwarding over TCP stopped after upgrading.

Fixed an issue on the firewall where logging in via the CLI or web interface did not work due to increased memory usage.

Fixed an issue where FQDN resolution failed for address objects, and all FQDN traffic was denied by the interzone-default policy rule.

Fixed an issue where dereferencing a NULL pointer that occurred caused pan_task processes to stop responding.

Fixed an issue on the firewall where DPDK allocated twice the amount of memory as requested for pre-allocation.

(Panorama appliances in HA configurations only) Fixed an issue where Panorama became unresponsive and displayed a 504 gateway timeout error when accessing the web interface or the CLI.

(PA-5450 firewalls only) Fixed an issue where traffic to benign applications was was impacted by holding TCP sequential segments for MLC inspection and not releasing the full chain after a benign verdict was received.

Fixed an issue related to the varrcvr process where the management plane CPU was higher than expected.

(PA-5450 firewalls only) Fixed an issue where BFD sessions flapped intermittently.

Fixed an issue where the CLI command show running security-policy timed out when the Security policy was large.

Fixed an issue on the firewall where changes were incorrectly applied after a reboot or a restart of the configd process.

Fixed an issue where, when the GlobalProtect portal was not configured, accessing the GlobalProtect gateway still loaded a portal malformed page.

Fixed an issue where network issues between the firewall and the log collector caused logrcvr process memory exhaustion.

Fixed an issue where the firewall stopped responding when the all_pktproc repeatedly restarted.

Fixed an issue where a custom based non Superuser was unable to push to firewalls.

Fixed an issue where traffic was denied by the interzone-default policy rule when a Security policy rule with an FQDN destination was configured.

Fixed a duplicate MAC address issue where an ethernet interface sent out Gratuitous ARP (GARP) messages for an IP address that was not configured on it.

Fixed an issue where the pan_task process restarted due to configd and devsrvr process memory requirements.

Fixed an issue where DNS resolution was delayed when an Antispyware policy rule was applied to both client to firewall and firewall to internal DNS server legs of a connection.

Fixed an issue where sessions bypassed L7 inspection or ended unexpectedly with the error resources unavailable when the firewall incorrectly interpreted the Content and Threat Detection (CTD) global packet queue as being full.