|
PAN-308902
|
Fixed an issue where, after upgrading to an affected release, the
firewall did not add mTLS websites that required client certificate
authentication via DN list to the ssl-decrypt exclude-cache list.
|
|
PAN-308654
|
Fixed an issue where the Elasticsearch Close Indices process closed
more indices than expected and dropped the number of open shards below
the minimum of 800 per Elasticsearch instance. This occurred because
the process did not correctly account for the number of Elasticsearch
instances when calculating the maximum number of allowed open shards.
|
|
PAN-304718
|
Fixed an issue where OSPF and BGP outages occurred due to an
all_task
process restart during clientless VPN content rewrite processing.
|
|
PAN-304576
|
Fixed an issue where the firewall entered a non-functional state due
to segmentation fault within the
all_pktproc
process that was caused by a session that involved http2 cleartext
traffic
|
|
PAN-304496
|
Fixed an issue where, after unregistering an IP tag and registering a
different IP tag for the same IP address via XML API, the dynamic
address group membership was not updated on the dataplane, which
resulted in Security policy rules being enforced incorrectly.
|
|
PAN-303722
|
Fixed an issue on the firewall where configuring spyware and
vulnerability profiles in Security policy rules caused a memory leak
in the
devsrvr
process with each configuration commit.
|
|
PAN-288001
|
Fixed an issue where devices with 5G cellular modems did not support
the ATT FirstNet auto Access Point Name (APN).
|
|
PAN-285181
|
Fixed an issue where the wifclient ran out of memory when Enhanced
Application Logging was enabled and a sudden traffic increase caused a
surge in EAL messages sent through WIF.
To use this fix, run the CLI command
debug iot eal memory-gc native
|
|
PAN-278688
|
Fixed an issue where DNS Security threat logs were not displayed on
the firewall when packet capture was enabled and the domain name
length was 62 characters.
|
|
PAN-273158
|
(PA-7000 Series firewalls only) Fixed an issue
where an incorrect ASIC configuration caused silent packet drops or
application slowness when receiving a mix of jumbo and non-jumbo
packets.
|
|
PAN-269228
|
Fixed an issue where the
all_task
process stopped responding, which caused a split brain condition.
|
|
PAN-267614
|
Fixed an issue where the Panorama web interface was slower than
expected due to high CPU utilization on the
mongodb
process.
|