2792 lines
81 KiB
HTML
2792 lines
81 KiB
HTML
<table class="table colsep rowsep table-striped">
|
||
<!--cq:include script="../../common/tablestack.jsp" /-->
|
||
|
||
<colgroup>
|
||
<col style="width: 25%" />
|
||
<col style="width: 75%" />
|
||
</colgroup>
|
||
<thead class="thead">
|
||
<tr class="row rowsep">
|
||
<th class="entry">
|
||
<div class="p"><b class="ph b">Issue ID</b></div>
|
||
</th>
|
||
<th class="entry">
|
||
<div class="p"><b class="ph b">Description</b></div>
|
||
</th>
|
||
</tr>
|
||
</thead>
|
||
|
||
<tbody class="tbody">
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p">—</div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
A fix was made to address
|
||
<a
|
||
class="xref"
|
||
href="https://security.paloaltonetworks.com/CVE-2026-0301"
|
||
title=""
|
||
data-scope="external"
|
||
data-format="html"
|
||
data-type=""
|
||
target="_blank"
|
||
>CVE-2026-0301</a
|
||
>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-240596</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>all_task</a
|
||
>
|
||
stopped responding due to an invalid memory address.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-242561</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where GlobalProtect tunnels disconnected shortly after
|
||
being established when SSL was used as the transfer protocol.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-240197</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where configuration changes made in Panorama and pushed
|
||
to the firewall weren’t reflected on the firewall.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-240174</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where, when LSVPN serial numbers and IP address
|
||
authentication were enabled, IPv6 address ranges and complete IPv6
|
||
addresses that were manually added to the IP address allow or exclude
|
||
list were not usable after a restart of the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>gp_broker</a
|
||
>
|
||
process or the firewall.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-239241</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Extended the root certificate for WildFire appliances to December 31,
|
||
2032.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-239144</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the web interface was slower than expected when
|
||
logging in, committing, and pushing changes after upgrading to PAN-OS
|
||
10.2.7.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-237876</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Extended the firewall Panorama root CA certificate which was
|
||
previously set to expire on April 7th, 2024.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-237871</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt"
|
||
>WF-500 appliances and PAN-DB private cloud deployments only</tt
|
||
>) Fixed an issue where the
|
||
<span class="ph systemoutput">root-cert</span> was set to expire on
|
||
December 31, 2023. With this fix, the expiration date has been
|
||
extended.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-237454</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where Panorama stopped redistributing IP
|
||
address-to-username mappings when packet loss occurred between the
|
||
distributor and the client.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-236244</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where you were unable to select authentication profiles
|
||
via the web interface.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-236233</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where SNMP reports displayed incorrect values for SSL
|
||
Proxy sessions and SSL Proxy utilization.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-235741</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where DNS resolution failed for Panorama and firewall
|
||
plugins if the DNS Server IP address was obtained through DHCP.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-235737</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>brdagent</a
|
||
>
|
||
process stopped responding due to a sudden increase in logging to the
|
||
bcm.log.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-235628</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where you weren’t prompted for login credentials when
|
||
you disconnected and connected back to the GlobalProtect portal when
|
||
SAML authentication was selected along with single sign-on (SSO) and
|
||
Single Log Out (SLO).
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-235557</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where uploads from tunnels, including GlobalProtect,
|
||
were slower than expected when the inner and outer sessions were on
|
||
different dataplanes.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-234852</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where DLP logs for the Salesforce application had a
|
||
report ID of 0 and did not include missing information such as file
|
||
type, file hash, and the reason for data filtering.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-234279</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>ikemgr</a
|
||
>
|
||
process crashed due to an IKEv1 timing issue, which caused commits to
|
||
fail with the following error message:
|
||
<span class="ph systemoutput"
|
||
>Client ikemgr requesting last config in the middle of a
|
||
commit/validate, aborting current commit</span
|
||
>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-233954</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the firewall was unable to retrieve correct
|
||
groups from the LDAP server.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-233207</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>configd</a
|
||
>
|
||
process stopped responding when a partial configuration revert
|
||
operation was performed.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-233191</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">PA-5450 firewalls only</tt>) Fixed an issue where
|
||
the Data Processing Card (DPC) restarted due to path monitor failure
|
||
after QSFP28 disconnected from the Network Processing Card (NPC).
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-232377</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<span class="ph systemoutput">AddrObjRefresh</span> job failed when
|
||
the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>useridd</a
|
||
>
|
||
process restarted.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-232358</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">PA-5450 firewalls only</tt>) Fixed an issue where
|
||
the interface on QSFP28 ports did not go down when the Tx cable was
|
||
removed from the QSFP28 module.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-232250</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where, when SSH service profiles for management access
|
||
was set to <span class="ph uicontrol">None</span>, the reported output
|
||
was incorrect.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-231771</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the firewall issued /box/getserv/ requests with
|
||
PAN-OS 7.1.0 and did not take device certificates.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-231698</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where you were unable to set the Dynamic Updates
|
||
schedule threshold to an empty value.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-231658</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where DNS resolution failed when interfaces were
|
||
configured as DHCP and a DNS server was provided via DHCP while also
|
||
statically configured with DNS servers.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-231552</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where traffic returning from a third-party Security
|
||
chain was dropped.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-231459</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">PA-5450 firewalls only</tt>) Fixed an issue where a
|
||
large number of invalid source MAC addresses were shown in drop-stage
|
||
packet captures.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-231422</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where you were unable to configure more than 256
|
||
scheduled objects on the firewall.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-231329</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>logrcvr</a
|
||
>
|
||
process stopped responding due to a corrupt log in the forwarding
|
||
pipeline.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-230813</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where flex memory leak caused decryption failure and
|
||
commit failure with the error message
|
||
<span class="ph systemoutput"
|
||
>Error preparing global objects failed to handle
|
||
CONFIG_UPDATE_START</span
|
||
>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-230656</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">Firewalls in HA configurations only</tt>) Fixed an
|
||
issue where a split brain condition occurred on both firewalls after
|
||
booting up any firewall, and an HA switchover occurred after booting
|
||
up a firewall with a higher HA priority even when no preemptive option
|
||
was enabled on the firewall.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-230377</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where FEC support was not enabled by default for
|
||
PAN-SFP28-25GBASE-LR modules.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-230362</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the firewall truncated the payload of a TCP Out
|
||
of Order segment with a FIN flag.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-230359</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where SAML authentication failed with the error message
|
||
<span class="ph systemoutput"
|
||
>Failed to verify signature against certificate</span
|
||
>
|
||
when <span class="ph systemoutput">ds:KeyName</span> was in the IdP
|
||
metadata.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-230106</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the firewall was unable to retrieve the most
|
||
current external dynamic list information from the server due to
|
||
hostname resolution failure.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-230092</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>routed</a
|
||
>
|
||
process stopped responding when committing routing-related changes if
|
||
Advanced Routing was enabled.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-230039</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where migrating from an Enterprise License Agreement
|
||
(ELA) to a Flexible VM-Series License failed with a deactivation error
|
||
message.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-229952</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the the
|
||
<span class="ph uicontrol">print PDF</span> option did not work (<span
|
||
class="ph uicontrol"
|
||
>Panorama > Managed Devices > Health</span
|
||
>).
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-229315</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where Octets in NetFlow records were always reported to
|
||
be 0 despite having a non-zero packet count.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-229307</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where half closed SSL decryption sessions stayed
|
||
active, which caused software packet buffer depletion.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-229080</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the new management IP address on the interface
|
||
did not take effect.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-229069</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where clientless VPN portal users were unable to access
|
||
clientless applications due to an SSL renegotiation being triggered.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-228820</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
A CLI command was added to address an issue where long-lived sessions
|
||
aged out even when there was ongoing traffic.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-228442</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue on firewalls in active/passive HA configurations where
|
||
sessions did not fail over from the active firewall to the passive
|
||
firewall when upgrading PAN-OS.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-228342</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where objects in the running configuration appeared to
|
||
be deleted under the push scope preview.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-228323</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where a large number of Panorama management server
|
||
cookies were created in the Redis database when the Cloud-Service
|
||
plugin sent an authentication request every second, and logging in to
|
||
or using Panorama was slower than expected.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-228277</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where commits took longer than expected.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-228273</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">Panorama appliances in FIPS-CC mode only</tt>)
|
||
Fixed an issue where the Elasticsearch cluster did not come up, and
|
||
the
|
||
<span class="ph systemoutput"
|
||
>show log-collector-es-cluster health</span
|
||
>
|
||
CLI command displayed the status as red. This caused log ingestion
|
||
issues for Panorama appliances in Panorama mode or Log Collector mode.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-227804</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where memory corruption caused the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>comm</a
|
||
>
|
||
process to stop responding.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-227774</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where commits failed with the error message
|
||
<span class="ph systemoutput"
|
||
>Management server failed to send phase 1 to client logrcvr</span
|
||
>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-227641</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where
|
||
<span class="ph uicontrol">Preview Changes</span> and
|
||
<span class="ph uicontrol">Change Summary</span> when saving changes
|
||
did not open a new window when clicked.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-227522</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where
|
||
<span class="ph uicontrol">shared</span> application filters that had
|
||
application object overrides were overwritten by predefined
|
||
applications.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-227397</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where selective pushes on Panorama removed a previously
|
||
pushed configuration from the firewalls.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-227233</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the combination signature aggregation criteria in
|
||
a Vulnerability Protection profile was incorrectly blank even though a
|
||
value was set.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-227058</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where traffic did not match Security policy rules with
|
||
the destination as FQDN and instead hit the default deny rule.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-226935</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where autocommits failed due to duplicate application
|
||
name entries.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-226860</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where macOS X-Auth clients disconnected prematurely
|
||
from the GlobalProtect gateway during a Phase 2 re-key event.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-226768</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where, when the GlobalProtect app was installed on iOS
|
||
endpoints and the gateway was configured to accept cookies, the app
|
||
remained in the <span class="ph uicontrol">Connecting</span> stage
|
||
after authentication, and the GlobalProtect log displayed the error
|
||
message `User is not in allow list`. This occurred when the app was
|
||
restarted or when the app attempted to reconnect after disconnection.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-226769</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where ElasticSearch used more memory than expected.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-226489</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where Panorama was unable to push scheduled Dynamic
|
||
Updates to firewalls with the error message
|
||
<span class="ph systemoutput"
|
||
>Failed to add deploy job. Too many (30) deploy jobs pending for
|
||
device</span
|
||
>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-226418</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
A CLI command was added to address an issue where long-lived sessions
|
||
aged out even when there was ongoing traffic.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-226260</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where support for CBC ciphers with some authentication
|
||
algorithms was only available in FIPS mode.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-225920</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where duplicate predict sessions did not release NAT
|
||
resources.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-225228</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where filtering Threat logs using any value under
|
||
<span class="ph uicontrol">THREAT ID/NAME</span> displayed the error
|
||
<span class="ph uicontrol">Invalid term</span>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-225169</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Added a CLI command to view
|
||
<span class="ph">Strata Logging Service</span> queue usage.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-225110</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue with firewalls in HA configurations where HA
|
||
configuration syncs did not complete or logging data was missing until
|
||
firewall processes were manually restarted or the firewalls were
|
||
rebooted.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-225094</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where performing a commit operation failed and the
|
||
following error message was displayed:
|
||
<span class="ph systemoutput">failed to handle CUSTOM_UPDATE</span>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-225082</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where GlobalProtect quarantine-delete logs were
|
||
incorrectly shown on passive firewalls.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-225013</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">PA-5450 firewalls only</tt>) Fixed an issue where
|
||
the firewall rebooted unexpectedly when a Network Card was on Slot 2
|
||
instead of a DPC.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-224955</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>devsrvr</a
|
||
>
|
||
process stopped responding when zone protection had more than 255
|
||
profiles.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-224772</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed a high memory usage issue with the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>mongodb</a
|
||
>
|
||
process that caused an OOM condition.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-224656</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>devsrvr</a
|
||
>
|
||
process caused delays when Dynamic Address Groups with large entry
|
||
lists were being processed during a commit, which caused commits to
|
||
take longer than expected.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-224405</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>distributord</a
|
||
>
|
||
process repeatedly stopped responding.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-224354</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where a memory leak related to the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>distributord</a
|
||
>
|
||
process occurred when connections flapped for IP address-to-username
|
||
mapping redistribution.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-224036</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">PA-5450 firewalls only</tt>) Fixed an issue where a
|
||
firewall with QoS configured wasn't able to send packets out of its
|
||
interfaces after a reboot.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-223855</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<span class="ph systemoutput">show running ippool</span> CLI command
|
||
output displayed incorrect used and available NAT IP address pools on
|
||
DIPP NAT policy rules in multidataplane firewalls.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-223852</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>all_pktproc</a
|
||
>
|
||
stopped responding when network packet broker or decryption broker
|
||
chains failed.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-223741</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>mprelay</a
|
||
>
|
||
process stopped responding, which caused a slot restart when another
|
||
slot rebooted.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-223481</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">PA-5450 firewalls only</tt>) Fixed an issue where
|
||
the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>all_pktproc</a
|
||
>
|
||
process stopped responding when the firewall was on PAN-OS 10.1.9-h3
|
||
or a later release.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-223457</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where, if the number of group queries exceeded the Okta
|
||
rate limit threshold, the firewall cleared the cache for the groups.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-223271</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the file transfer of large zipped and compressed
|
||
files had the App-ID <span class="ph systemoutput">unknown-tcp</span>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-223263</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue on the web interface where the system clock for
|
||
<span class="ph uicontrol">Mexico_city</span> was displayed in CDT
|
||
instead of CST on the management dashboard.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-223259</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where selective pushes failed with the error
|
||
<span class="ph systemoutput"
|
||
>Failed to generate selective push configuration. Unable to retrieve
|
||
last in-sync configuration for the device, either a push was never
|
||
done or version is too old. Please try a full push</span
|
||
>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-223094</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where fragmented TCP traffic was dropped due to an IP
|
||
address ID conflict over the SD-WAN tunnel.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-222941</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where viewing the latest logs took longer than expected
|
||
due to log indexer failures.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-222533</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt"
|
||
>VM-Series firewalls on Microsoft Azure and Amazon Web Services
|
||
(AWS) environments</tt
|
||
>) Added support for HA link monitoring and path monitoring.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-222500</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where an old configuration unexpectedly merged during a
|
||
push from Panorama.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-222418</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the firewall intermittently recorded a
|
||
reconnection message to the authentication server as an error, even if
|
||
no disconnection occurred.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-222253</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue on Panorama where policy rulebase reordering under
|
||
<span class="ph uicontrol">View Rulebase by Groups</span> (<span
|
||
class="ph menucascade"
|
||
><span class="ph uicontrol">Policy</span
|
||
><span class="ph uicontrol"><policy-rulebase></span></span
|
||
>) did not persist if you reordered the policy rulebase by dragging
|
||
and dropping individual policy rules and then moved the entire tag
|
||
group.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-222089</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where you were unable to context switch from Panorama
|
||
to the managed device.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-221938</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue with network packet broker sessions where the broker
|
||
session and primary session timeouts were out of sync, which caused
|
||
traffic drops if the broker session timed out when the primary session
|
||
was still active.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-221857</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where users were unable to log in to the GlobalProtect
|
||
app using SAML authentication after upgrading to PAN-OS 10.2.3-h4, and
|
||
the GlobalProtect logs displayed the following error message:
|
||
<span class="ph systemoutput"
|
||
>Username from SAML SSO response is different from the input</span
|
||
>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-221763</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue on the web interface where text overlapped when editing
|
||
address and prefix values using Firefox.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-221577</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where a static route for a branch or hub over the
|
||
respective virtual interface wasn't installed in the routing table
|
||
even when the tunnel to the branch or hub was active.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-221316</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>useridd</a
|
||
>
|
||
process memory consumption increased significantly, which caused the
|
||
process to stop responding and the device to restart.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-221208</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the tunnel monitor was unable to remain up when
|
||
zone protection with Strict IP was enabled and NAT Traversal was
|
||
applied.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-221033</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the firewall responded to an ARP request for an
|
||
IP address in the firewall's NAT address pool when the IP address
|
||
wasn't in the same subnet as the IP address of the ingress interface.
|
||
With this fix, the firewall won't send unintended GARP responses.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-221003</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where you were unable to uncheck firewalls in HA
|
||
configurations from the device group when
|
||
<span class="ph uicontrol">Group HA Peers</span> was enabled.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-220790</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>reportd</a
|
||
>
|
||
process stopped responding, which caused Panorama to restart.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-220659</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue on the firewall where scheduled antivirus updates
|
||
failed when external dynamic lists were configured on the firewall.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-220640</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">PA-220 firewalls only</tt>) Fixed an issue where
|
||
the firewall CPU percentage was miscalculated, and the values that
|
||
were displayed were incorrect.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-220180</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where configured botnet reports (<span
|
||
class="ph uicontrol"
|
||
>Monitor > Botnet</span
|
||
>) weren’t generated.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-219813</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the configuration log displayed incorrect
|
||
information after a multi-device group
|
||
<span class="ph uicontrol">Validate-all</span> operation.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-219768</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where you were unable to filter data filtering logs
|
||
with <span class="ph uicontrol">Threat ID/NAME</span> for custom data
|
||
patterns created over Panorama.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-219644</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where firewalls that forwarded logs to a syslog server
|
||
over TLS (<span class="ph uicontrol">Objects > Log Forwarding</span
|
||
>) used the default Palo Alto Networks certificate instead of the
|
||
configured custom certificate.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-219585</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where enabling
|
||
<span class="ph systemoutput">syslog-ng</span> debugs from the root
|
||
caused 100% disk utilization.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-219415</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where BGP routes were installed in the routing table
|
||
even when the option to install routes was disabled in the
|
||
configuration.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-219300</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the task manager displayed only limited data.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-219260</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">M-Series appliances only</tt>) Fixed an issue where
|
||
the management interface flapped due to low memory reserved for kernel
|
||
space.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-219241</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where web content for a failed SAML login had
|
||
readability and functionality issues for the GlobalProtect app.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-219137</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">CN-Series firewalls only</tt>) Fixed an issue where
|
||
firewalls did not upload files to the WildFire public cloud.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-218928</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>reportd</a
|
||
>
|
||
process stopped responding after querying logs or generating ACC
|
||
reports with some filters.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-218671</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue on Panorama where commits failed after downgrading the
|
||
SD-WAN plugin.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p">
|
||
<b class="ph b"><b class="ph b">PAN-218663 and PAN-181876 </b></b>
|
||
</div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
A fix was made to address
|
||
<a
|
||
class="xref"
|
||
href="https://security.paloaltonetworks.com/CVE-2024-2433"
|
||
title=""
|
||
data-scope="external"
|
||
data-format="html"
|
||
data-type=""
|
||
target="_blank"
|
||
>CVE-2024-2433</a
|
||
>.
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-218611</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the device telemetry region wasn't updated on the
|
||
firewall when pushed from the Panorama template stack.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-218555</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the firewall did not receive dynamic address
|
||
updates pushed from Panorama during initial registration to Panorama.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-218352</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where Panorama was slower than expected when WildFire
|
||
deployment was scheduled every minute to a large number of devices.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-218331</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where you were unable to export or download packet
|
||
captures from the firewall when context switching from Panorama.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-218273</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where TCP keepalive packets from the client to the
|
||
server weren't forwarded when SSL decryption was enabled.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-218238</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where you were unable to create a file exception (<span
|
||
class="ph uicontrol"
|
||
>Monitor > Threat Log > Detailed Log view > Create
|
||
Exception</span
|
||
>), and the following error message was displayed:
|
||
<span class="ph systemoutput"
|
||
>no antivirus profile corresponding to threat log</span
|
||
>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-218119</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the firewall transmitted packets with an
|
||
incorrect source MAC address during commit operations.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-217831</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue memory leak issue related to the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>logd</a
|
||
>
|
||
process that occurred due to a sysd object not being released.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-217728</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where uploading a certificate in a manual configuration
|
||
option for SafenetHSM failed.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-217674</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where RADIUS authentication failed when the destination
|
||
route of the service route was configured with an IPv4 address with
|
||
more than 14 characters.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-217541</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>useridd</a
|
||
>
|
||
process stopped responding after a restart when HIP redistribution was
|
||
enabled.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-217510</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where inbound DHCP packets received by a DHCP client
|
||
interface that weren’t addressed to itself were silently dropped
|
||
instead of forwarded.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-217493</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where superusers with read-only privileges were unable
|
||
to view SCEP object configurations.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-217280</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where, when Advanced Routing was enabled, the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>routed</a
|
||
>
|
||
process stopped responding during booting up.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-217272</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the DNS proxy log included an excessive number of
|
||
the following error message:
|
||
<span class="ph systemoutput"
|
||
>Warning: pan_dnsproxy_log_resolve_fail: Failed to resolve domain
|
||
name ** AAAA after trying all attempts to name servers</span
|
||
>
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-217241</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where predict session conversion failed for RTP and
|
||
RTCP traffic.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-217064</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where commits took longer than expected when the DLP
|
||
plugin was configured.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-217024</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where fetching device certificates failed for internal
|
||
DNS servers with the error message
|
||
<span class="ph systemoutput"
|
||
>ERROR Error: Could not resolve host:
|
||
certificate.paloaltonetworks.com</span
|
||
>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-216647</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<span class="ph systemoutput">sysd</span> node was updated at
|
||
incorrect times.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-216214</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt"
|
||
>Panorama managed firewalls in active/active HA configurations
|
||
only</tt
|
||
>) Fixed an issue where the HA status displayed as
|
||
<span class="ph uicontrol">Out of Sync</span> (<span
|
||
class="ph uicontrol"
|
||
>Panorama > Managed Devices > Health</span
|
||
>) if local firewall configurations were made on one of the HA peers.
|
||
This caused the next HA configuration sync to overwrite the local
|
||
firewall configuration made on the HA peer.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-216101</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where a memory leak related to a process and LLDP
|
||
packet processing caused an OOM condition on the firewall.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-215857</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the option to reboot the entire firewall was
|
||
visible to vsys admins.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-215583</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue on firewalls in HA configurations where the primary
|
||
firewall went into a non-functional state due to a timeout in the
|
||
<span class="ph systemoutput">pan_comm</span> logs during the
|
||
policy-based forwarding (PBF) parse, which caused an HA failover.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-215576</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<span class="ph systemoutput">userID-Agent</span> and
|
||
<span class="ph systemoutput">TS-Agent</span> certificates were set to
|
||
expire on November 18, 2024. With this fix, the expiration date has
|
||
been extended to January 2032.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-215436</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue with the web interface where the latest logs took
|
||
longer than expected to display under
|
||
<span class="ph uicontrol">Monitor</span>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-215223</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
A fix was made to address
|
||
<a
|
||
class="xref"
|
||
href="https://security.paloaltonetworks.com/CVE-2025-4231"
|
||
title=""
|
||
data-scope="external"
|
||
data-format="html"
|
||
data-type=""
|
||
target="_blank"
|
||
>CVE-2025-4231</a
|
||
>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-215082</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">M-300 and M-700 appliances only</tt>) Fixed an
|
||
issue where Panorama generated erroneous system logs (<span
|
||
class="ph menucascade"
|
||
><span class="ph uicontrol">Monitor</span
|
||
><span class="ph uicontrol">Logs</span
|
||
><span class="ph uicontrol">System</span></span
|
||
>) to alert that the appliance memory usage limit was reached.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-214987</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where
|
||
<span class="ph uicontrol">Application Filter</span> names weren’t
|
||
random, and they matched or included internal protocol names.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-214942</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where SD-WAN UDP traffic failed over to a non-member
|
||
path after a flap of an SD-WAN virtual interface.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-214847</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where, when certificate authentication for admin user
|
||
authentication was enabled, vulnerability scans that used usernames or
|
||
passwords against the management interface reported a vulnerability
|
||
due to a missing HSTS header in the
|
||
<span class="ph uicontrol">Access Denied</span> response page.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-214773</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where RTP packets traversing intervsys were dropped on
|
||
the outgoing vsys.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-214558</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where overriding a Layer2/vwire subinterface on
|
||
Panorama caused other subinterfaces to disappear.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-214336</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where ICMPv6 unreachable messages were sent with an
|
||
unspecified source address ( :: ) for VLAN interfaces.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-213956</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the firewall interface did not go down even after
|
||
the peer link/switch port went down.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-213918</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where mlav-test-pe-file.exe was not detected by
|
||
WildFire Inline ML.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-213491</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the management CPU was high, which caused the web
|
||
interface to be slower than expected.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-213173</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where
|
||
<span class="ph uicontrol">Preview Changes</span> under
|
||
<span class="ph uicontrol">Scheduled Pushes</span> did not launch the
|
||
<span class="ph uicontrol">Change Preview</span> window.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-213112</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where executing the
|
||
<span class="ph systemoutput">show report directory-listing</span> CLI
|
||
command resulted in no output after upgrading to a PAN-OS 10.1
|
||
release.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-213103</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where Clientless VPN access failed with the error
|
||
message
|
||
<span class="ph systemoutput">temporarily unavailable</span> when
|
||
accessing the Clientless VPN bookmarked application from the identity
|
||
provider application portal.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-212932</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the firewall went into a restart loop with the
|
||
following error message:
|
||
<span class="ph systemoutput"
|
||
>failed to get mgt settings candidate: configured traffic quota of 0
|
||
MB is less than the minimum 32 MB</span
|
||
>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-212877</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where a race condition caused log flooding, which
|
||
caused the firewall to go into an unresponsive state.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-212770</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue on the firewall where the WildFire file size limit
|
||
value did not match on the web interface and the CLI.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-212580</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">PA-7050 firewalls only</tt>) Fixed an issue where
|
||
disk space filled up due to files under
|
||
<span class="ph systemoutput">/opt/var/s8/lp/log/pan/</span> not being
|
||
properly deleted.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-211945</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where URL Filtering system logs showed the error
|
||
message
|
||
<span class="ph systemoutput"
|
||
>CURL ERROR: bind failed with errno 124: Address family not
|
||
supported by protocol</span
|
||
>
|
||
even though the PAN-DB cloud was connected.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-211827</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where Dynamic Updates failed with the following error
|
||
message:
|
||
<span class="ph systemoutput"
|
||
>CONFIG_UPDATE_INC: Incremental update to DP failed please try to
|
||
commit force the latest config</span
|
||
>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-211821</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue on firewalls in HA configurations where committing
|
||
changes after disabling the QoS feature on multiple Aggregate Ethernet
|
||
(AE) interfaces caused the dataplane to go down.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-211384</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the size of the
|
||
<span class="ph systemoutput">redisthost_1</span> in the Redis
|
||
database continuously increased, which caused an OOM condition.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-210234</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed a REST API call to query the template stack configuration did
|
||
not return the template stack variables or device variables.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-208438</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue on Panorama where Security policy rules incorrectly
|
||
displayed as disabled.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-208395</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where user authentication failed in multi-vsys
|
||
environments with the error message
|
||
<span class="ph systemoutput">User is not in allowlist</span> when an
|
||
authentication profile was created in a shared configuration space.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-208085</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the BFD peers were deleted during a commit from
|
||
Panorama. This occurred because the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>pan_comm</a
|
||
>
|
||
thread became deadlocked due to the same
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>sysd</a
|
||
>
|
||
object was handled during the commit.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-207577</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where
|
||
<span class="ph uicontrol">Panorama > Setup > Interfaces</span>
|
||
wasn't accessible for users with custom admin roles even when the
|
||
interface option was selected for the custom admin roles.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-207003</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>logrcvr</a
|
||
>
|
||
process NetFlow buffer wasn't reset which resulted in duplicate
|
||
NetFlow records.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-206325</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where a renamed object was still referenced with the
|
||
previous name in a Security policy rule, which caused commit failures
|
||
when using <span class="ph systemoutput">edit</span> API to create the
|
||
rule.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-206041</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">PA-7050 firewalls only</tt>) Fixed an issue where
|
||
the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>ikemgr</a
|
||
>
|
||
process stopped responding.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-204808</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt"
|
||
>PA-400 Series, PA-1400 Series, PA-3400 Series, and PA-5400 Series
|
||
firewalls only</tt
|
||
>) Fixed an issue where executing the CLI command
|
||
<span class="ph systemoutput"
|
||
>show running resource-monitor ingress-backlogs</span
|
||
>
|
||
displayed the error message
|
||
<span class="ph systemoutput"
|
||
>Server error : Dataplane is not up or invalid
|
||
target-dp(*.dp*)</span
|
||
>
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-204663</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue on Panorama where you were unable to context switch
|
||
from one managed firewall to another.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-202008</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where Traffic logs exported to CSV files contained
|
||
inaccuracies and weren’t complete.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-201269</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where commits failed with the error message
|
||
<span class="ph systemoutput"
|
||
>IPv6 addresses are not allowed because IPv6-firewalling is
|
||
disabled</span
|
||
>
|
||
when Security policy rules had an address group with more than 1000
|
||
FQDN address objects.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-198190</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">VM-Series firewalls only</tt>) Fixed an issue where
|
||
the MTU on the management interface couldn’t be configured to a value
|
||
greater than 1500.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-197189</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the RST packet wasn't sent to the client when
|
||
decrypted HTTP/2 traffic was detected by custom vulnerability
|
||
signatures with action reset-both.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-196146</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">VM-Series firewalls only</tt>) Fixed an issue where
|
||
hostname validation failed due to the firewall not taking the hostname
|
||
provided in <span class="ph systemoutput">init.cfg</span>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-193484</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where DNS failed if the domain name started with a
|
||
period.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-192318</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where executing the CLI command
|
||
<span class="ph systemoutput">show rule-hit-count device-group</span>
|
||
displayed the error message
|
||
<span class="ph systemoutput"
|
||
>Server error : show rule hit count op-command failed</span
|
||
>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-186957</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where, in
|
||
<span class="ph uicontrol">SAML Metadata Export</span>, a drop-down
|
||
did not appear in the input field when
|
||
<span class="ph uicontrol">IP or Hostname</span> was selected for
|
||
<span class="ph uicontrol">Type</span>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-185286</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
(<tt class="ph tt">PA-5400 Series firewalls only</tt>) Fixed an issue
|
||
on Panorama where device health resources did not populate.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-181706</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where the
|
||
<a
|
||
class="term"
|
||
href="#"
|
||
title=""
|
||
data-scope=""
|
||
data-format="dita"
|
||
data-type=""
|
||
target="_self"
|
||
>logrcvr</a
|
||
>
|
||
process stopped responding after upgrading to PAN-OS 10.1.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-179952</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue on Panorama where not all categories were displayed
|
||
under <span class="ph uicontrol">Log settings</span>.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-179260</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where admins and other superusers were unable to remove
|
||
a commit lock that was taken by another admin user with the format
|
||
<domain/user>. As a result, deleting the commit lock failed.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-175642</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where system logs to alert for support license expiry
|
||
weren’t generated.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
|
||
<tr class="row rowsep">
|
||
<td class="entry">
|
||
<div class="p"><b class="ph b">PAN-98605</b></div>
|
||
</td>
|
||
<td class="entry relcol">
|
||
<div class="p">
|
||
Fixed an issue where audit comments did not appear in the audit
|
||
comments archive.
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
</tbody>
|
||
</table>
|