firewallissues/reference/PAN-OS/addressed/10.2.14.html

<table class="table colsep rowsep table-striped">
  <!--cq:include script="../../common/tablestack.jsp" /-->

  <colgroup>
    <col style="width: 25%" />
    <col style="width: 75%" />
  </colgroup>
  <thead class="thead">
    <tr class="row rowsep">
      <th class="entry">
        <div class="p"><b class="ph b">Issue ID</b></div>
      </th>
      <th class="entry">
        <div class="p"><b class="ph b">Description</b></div>
      </th>
    </tr>
  </thead>

  <tbody class="tbody">
    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-282640</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where custom reports showed incomplete data when
          exported in CSV format from Panorama.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-282236</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where large IPv6 packets were reassembled incorrectly
          on the firewall when the packets arrived fragmented over an IPv4
          tunnel.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-279746</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where SMTP packets were not sent out when the Client
          Hello arrived at the firewall in multiple out-of-order segments and
          the traffic was not subject to SSL decryption.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-279621</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where processes stopped responding when HTTPS Forward
          traffic was run.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-279604</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where scheduled SaaS application usage reports were
          generated incorrectly, and the login page was displayed instead of the
          report content.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-279176</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the configuration audit displayed inaccurate
          information after partially loading the configuration via the CLI,
          which caused the audit to flag the configuration as deleted or
          changed.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-278088</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <span class="ph systemoutput">show system resources follow</span> CLI
          command was not available.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-277235</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <span class="ph uicontrol">Migration Configuration</span> dialog box
          displayed an incorrect number of virtual routers when enabling
          Advanced Routing from Panorama.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-277147</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where daily scheduled reports were not generated and
          emailed.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-277000</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall stopped responding after upgrading
          to PAN-OS 11.0.2 with lockless-qos enabled.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-276795</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the GlobalProtect client displayed an error
          message when you clicked
          <span class="ph uicontrol">Check Now</span> and
          <span class="ph uicontrol">Preferred Releases</span> and
          <span class="ph uicontrol">Base Releases</span> were unchecked (<span
            class="ph uicontrol"
            >Device &gt; Software</span
          >).
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-276491</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">Panorama virtual appliances only</tt>) Fixed an
          issue where Panorama stopped responding when running reports.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-275077</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where DNS Security intermittently logs malicious domain
          URLs as Alert instead of taking a Sinkhole action, even when
          configured to Sinkhole malicious DNS domains.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-274797</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where a DPC on slot 3 failed intermittently due to the
          <span class="ph systemoutput">pktlog_forwarding</span> process
          restarting, which resulted in an unexpected HA failover.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-274726</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Wildfire signature generation was enabled on all
          nodes in a cluster instead of only the active node.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-274650</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall did not perform certificate expiry
          validation during a commit, which resulted in successful
          authentication even when an intermediate certificate had expired.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-274611</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Added a CLI debug command to increase the queue size to address file
          transfer errors.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-274592</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">Firewalls in HA configurations only</tt>) Fixed an
          issue where the firewall did not fail over when the active firewall
          experienced data plane issues.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-274570</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >devsrvr</a
          >
          process restarted after a failed commit due to an invalid memory
          access.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-274557</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on PA-5450 in FIPSCC mode where a firewall rebooted
          into maintenance mode when it was manually rebooted from the web
          interface.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-274333</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the Logging Service License Status displayed as
          red even though a valid license was installed on the firewall.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-274292</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">M-600 Appliances only</tt>) Fixed an issue where
          the web interface was slow when logging in and filtering for policies
          due to deep search operations taking longer than expected.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273969</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the Panorama interface template did not include
          the Forward Error Correction (FEC) setting.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273964</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where SNMP scans to a firewall timed out after
          upgrading to a PAN-OS 10.2 release.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273949</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall generated the following error
          message in the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >snmpd</a
          >
          logs:
          <span class="ph systemoutput"
            >pan_get_keystr_from_cryptod(pan_snmpinterface.c:181): Key
            X2F1dGhfa2V5 import from cryptod failed.</span
          >
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273947</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the displayed group name differed depending on
          whether the group was configured locally on the firewall or through
          Panorama.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273694</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall rebooted due to an out-of-bounds
          memory access that occurred as a result of the SIP content length
          value being split across packets.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273597</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where logs in the cloud database displayed in the
          <span class="ph uicontrol">Not-Resolved</span> category but not in the
          local database.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273453</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where restarting the firewall did not initiate an
          autocommit job, which caused the firewall to stop responding and the
          HA interface to go down.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273153</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the Panorama web interface was slower than
          expected due to excessive polling of the
          <span class="ph systemoutput">MonitorDirect.getTasks</span> API by the
          Task Manager.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273129</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on the web interface where the
          <span class="ph uicontrol">negate</span> option was visible when you
          clicked on the rule name, but not when you viewed the target options
          from the <span class="ph uicontrol">rulebase</span> attribute.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273021</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where 25G port links did not come up due to a change in
          the handling of 25G DAC modules.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-272998</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where commits from Panorama to VM-Series firewalls on
          Microsoft Azure environments failed.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-272959</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall generated BGP update packets larger
          than 1500 bytes when the interface MTU was 1500 bytes and jumbo frames
          were enabled globally.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-272743</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where non-captive portal traffic was not visible under
          <span class="ph uicontrol">Traffic Logs</span> when the traffic was
          denied by an authentication rule and the session was discarded.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-272726</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on the web interface where the
          <span class="ph uicontrol">URL Filtering</span> change category
          feature did not work.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-272413</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where device telemetry did not generate logs after
          upgrading the firewall.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-272395</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where informational logs caused the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >distributord</a
          >
          process log file to be frequently overwritten.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-272175</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where session rematch caused ACE cloud application
          traffic to match the wrong policy.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-272172</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where
          <span class="ph systemoutput">plugin_api_server</span> could
          experience a memory leak when using OpenConfig for telemetry.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-272171</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall dropped the AAAA DNS server response
          and caused delays in traffic from Ubuntu or Linux clients when DNS
          Security was enabled.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-272006</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall did not trigger a kernel core dump
          as a large core when the CPLD (Complex Programmable Logic Device) sent
          a Non-Maskable Interrupt (NMI) to the CPU.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271926</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where TLS 1.3 decryption failed with a bad record MAC
          error when the firewall was configured to decrypt and inspect TLS
          traffic.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271828</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where, after an accumulation proxy changed to
          no-decrypt or no proxy, only the Client Hello was sent to Content
          Threat Detection.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271490</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on the firewall that caused the following error message
          to be displayed:
          <span class="ph systemoutput"
            >frr_ns0: failed to stop child frr_ns0_ospf6d</span
          >.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271436</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          A CLI counter was added to indicate a full suppression queue.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271425</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >Firewalls in active/active HA configurations only</tt
          >) Fixed an issue with SSL inbound decryption on firewalls on a vwire
          setup with asymmetric routing.
        </div>
        <div class="p">
          To use this fix, enter the CLI command
          <span class="ph systemoutput"
            >set system setting ssl-decrypt ha-vwire-mac-learn global yes</span
          >
          on both firewalls in an HA pair.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271314</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where pushing changes to a prefix list used for BGP
          from Panorama affected OSPF routes.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271273</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where dynamic update downloads failed when
          <span class="ph uicontrol">IPv6 firewalling</span> was enabled on the
          firewall and both IPv4 and IPv6 were configured on the management
          interface.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271239</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where searching for the GlobalProtect client version
          browser in Panorama logs returned no results.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b"> PAN-271215</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          A fix was made to address
          <a
            class="xref"
            href="https://security.paloaltonetworks.com/CVE-2025-4230"
            title=""
            data-scope="external"
            data-format="html"
            data-type=""
            target="_blank"
            >CVE-2025-4230</a
          >.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271184</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Device Telemetry failed due to an issue with the
          encoding of characters in the log file path.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271175</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the *all_task * process stopped responding with a
          SIGABRT.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271173</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall displayed an incorrect maximum
          translated IP capacity when using DIPP NAT policy rules.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271152</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">7000-Series firewalls in HA configurations only</tt
          >) Fixed an issue where the firewall failed over into a non-functional
          state, and the LFC LED was blinking on the passive firewall.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271115</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where SNMP polling timed out on firewalls with
          aggregate ethernet (AE) interfaces.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-270849</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed a memory leak issue related to the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >configd</a
          >
          process that occurred when running consecutive commits for mulitple
          days.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-270747</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <span class="ph systemoutput"
            >show system statistics application</span
          >
          CLI command failed.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-270651</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall didn't restart after applying an
          air-gapped license if the firewall capacity was the same as the
          license capacity.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-270607</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >Firewalls in active/passive HA configurations only</tt
          >) Fixed an issue where OSPF failed to establish after a failover from
          the active firewall to the passive firewall.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-270569</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >userid</a
          >
          process stopped responding due to memory was being reset to NULL when
          it was freed.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-270323</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall allowed cleartext web-browsing
          traffic on port 443 when the Security policy rule was configured to
          allow application: web-browsing with service: application-default.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-270248</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall failed to forward logs to a SNMP
          trap server if the SNMP manager IP address was unable to be resolved.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-270193</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the Panorama management server changed its
          certificate authority (CA) unexpectedly, which caused managed
          firewalls to disconnect.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-270192</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Panorama did not display the management IP
          address of devices onboard via ZTP.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-270077</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >VM-Series firewalls in Amazon Web Services (AWS) environments
            only</tt
          >) Fixed an issue template values were missing in newly spun firewalls
          in auto scale deployments without an explicit push with forced
          template values from Panorama.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-270068</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall attempted to connect to the AppID
          cloud using gRPC even when App-ID Cloud Engine was disabled.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-269737</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the followig critical error displayed repeatedly:
          <span class="ph systemoutput">/mnt/cdrom is mounted as Read-Only</span
          >.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-269716</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where half-closed TCP sessions did not refresh the
          session timeout when continuously receiving data after setting the
          <span class="ph systemoutput"
            >cfg.session.tcp-no-refresh-fin-rst</span
          >
          option to<span class="ph systemoutput">True</span>.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-269677</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Panorama did not check for a NULL pointer when
          querying logs, which caused logs to not display on the web interface.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-269557</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the mib ID returned an incorrect value via SNMP.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-269535</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the mib ID returned an incorrect value via SNMP.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-269499</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall stopped responding when receiving a
          high number of logs.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-269456</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall rebooted unexpectedly when
          configuring the GlobalProtect portal and gateway from Panorama.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-269303</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the CSV export of disabled applications included
          duplicate entries, which caused the count of disabled applications to
          be higher in the CSV export than on the web interface.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-269193</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall redirected the user to the first
          application instead of the portal page with a list of applications
          when multiple applications were configured for GlobalProtect
          clientless VPN along with any user match.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-269106</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <span class="ph systemoutput">wifclient</span> stopped responding
          during server certificate verification for MICA gRPC connections and
          caused the dataplane to restart when using a cloud-based ML detection
          engine (MICA). On certain platforms, this caused the firewall to
          reboot periodically.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-269052</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where traffic was blocked by a URL filtering profile
          even though the Security policy rule did not have a URL filtering
          profile configured.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-269027</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue related to external dynamic lists that caused commit
          times on the firewall to be higher than expected.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268951</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed a CPS counter query issue that caused SNMP polling timeouts on
          the firewall.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268909</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where IP address tags were removed from firewalls after
          a management server or
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >useridd</a
          >
          process restart. This occurred when a Panorama serial-number based
          configuration was used for User-ID redistribution.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268815</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue that caused the firewall to reboot due to the wifclient
          exiting multiple times when using IoT Security.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268800</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where a large number of logs caused the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >logrcvr</a
          >
          process to stop responding.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268727</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where traffic was dropped when the accumulation proxy
          was enabled and header insertion modified packets.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268708</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where PDF summary and email reports displayed IPv6
          addresses instead of IPv4 addresses.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268707</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the XML API call to clear rule hit count using
          device group syntax failed with an error.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268629</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where traffic did not match the correct security policy
          when using an application-filter that references a cloud application.
          This occurred when a high number of cloud applications were attached
          with a custom tag.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268597</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall displayed 0 bytes received for
          GlobalProtect SSL sessions in the traffic logs.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268569</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the web interface was slower than expected when
          logging in and filtering for policies.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268426</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall was unable to connect to a syslog
          server that used a TLS certificate without a subject key identifier.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268308</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <span class="ph uicontrol">Push Scope</span> was not automatically
          displayed when you selected
          <span class="ph uicontrol">Commit and Pushes Changes Made by</span>.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268279</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where autocommits failed if the management IPv6 gateway
          was the same as the dataplane interface IP address.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268276</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where GlobalProtect clients intermittently failed to
          connect to the gateway with the error message
          <span class="ph uicontrol">could not connect to gateway</span>.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268168</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where uploading files that were 5GB or larger to Google
          Drive or Youtube failed when a decryption policy rule for http2 was
          enabled
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268127</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where tagging devices in Panorama did not work as
          expected.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268118</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on firewalls in active/passive HA configurations where,
          after a failover, irrelevant routing FIB entries were seen in the
          routing table on the newly active firewall.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268002</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where URL filtering response pages were not displayed
          for sites that were blocked as a result of SSL/TLS handshake
          inspection.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-267995</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where after migrating to a new platform, DLP verdicts
          were not displayed in the Cloud Manager or logs.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-267936</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where commits failed with a validation error when you
          changed the encryption level and re-encryption option on a Panorama
          managed firewall.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-267934</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where commits remained at 98%, which resulted in the
          BGP connection flapping.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-267830</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the snmpd.log.old file continuously increased,
          which caused the root partition to become full.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-267781</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Panorama did not display the Source Dynamic
          Address Group.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-267518</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where WildFire submission logs incorrectly reported
          allowed malicious samples even when they were blocked by threat
          prevention profiles.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-267328</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >all_task</a
          >
          process stopped responding, which caused the firewall to stop
          processing traffic.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-267235</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall did not send User-ID redistribution
          messages to Panorama when the firewall had multiple virtual systems
          configured and one of the virtual systems had a display name that was
          the same as the existing vsys name.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-267097</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the replay database size increased significantly
          due to local and special configurations not being purged after
          commits.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-266971</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall generated AAAA DNS queries when IPv6
          firewalling was disabled.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-266900</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on the Panorama web interface where you were unable to
          click <span class="ph uicontrol">OK</span> after selecting an install
          package type and file from the dropdown and selecting a firewall.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-266769</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the GlobalProtect gateway did not handle IP
          address changes of the inner gateway when the NGPA new protocol was
          enabled.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-266653</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where unexpected path monitor failures caused the
          firewall to stop responding.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-266639</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where administrators were unable to edit or add virtual
          router configurations when a filter was applied to the viewer.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-266574</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where users were unable connect to the portal due to
          Certificate Revocation List (CRL) checks due to the downloaded CRL
          file being expired, which caused the CRL cache to be bypassed.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-266462</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where selective pushes did not work as expected when
          the device group was renamed by a different admin user.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-266391</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the number of hints values were not updated even
          when there were no hint files on the system.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-266302</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where OSPFv3 Link State (LS) update packets (type 9)
          were not fragmented properly, which caused the OSPF header to have an
          incorrect checksum when sent from the firewall. This occurred when the
          update packet size exceeded 1514 byte, which resulted in the peer
          device rejecting the packet and the neighbor relationship going down.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-266279</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on Panorama where the default version of IKE gateway
          was not set to IKEv2 only mode, which caused VPN establishment issues
          if the firewall recognized a new configuration as IKEv1.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-266003</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on the firewall where a configuration policy push
          caused both active and passive firewalls to go down when a high number
          of spyware profiles and vulnerability profiles were pushed to the
          dataplane.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-265931</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Added debug functionality in the
          <span class="ph systemoutput">packet-diag</span> log to address an
          issue regarding policy rule matching.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-265791</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <span class="ph systemoutput">all_task</span> process stopped
          responding, which caused the dataplane to go down.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-265646</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the config lock icon was not visible for a custom
          role-based admin when a Superuser admin had acquired the config lock.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-265462</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where you were unable to download PDFs when connected
          via a Clientless VPN.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-265434</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the flow process restarted with the error message
          <span class="ph systemoutput"
            >SIGABRT __GI_raise __GI_abort __libc_message malloc_printer</span
          >.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-265344</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where
          <span class="ph uicontrol">Import GlobalProtect Client Package</span>
          did not work after clicking <span class="ph uicontrol">OK</span> after
          selecting a valid package under
          <span class="ph uicontrol"
            >Device &gt; GlobalProtect Client &gt; Upload</span
          >).
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-265179</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where a kernel race condition caused the firewall to
          reboot with a kernel panic.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-265014</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where changes made to device groups with the same
          prefix name were not visible in the commit scope.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264912</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall did not shut down completely.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264883</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">PA-7080 appliances with LPCs only</tt>) Fixed an
          issue where syslog forwarding over TCP stopped after upgrading.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264845</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the Log Forwarding for Security Services feature
          did not correctly filter policy rules with log forwarding profiles.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264806</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">PA-3440 firewalls only</tt>) Fixed an issue where
          the firewall was unable to validate or commit a configuration when it
          was imported from another firewall model.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264762</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall showed the status of SFP+ interfaces
          as not up, or up but not configured, when a PAN-SFP-PLUS-SR cable was
          connected.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264708</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where a selective push was blocked when a configuration
          load was done.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264678</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where
          <span class="ph uicontrol">Preview Changes</span> did not display
          configuration changes in
          <span class="ph uicontrol">Commit and push</span> &gt;
          <span class="ph uicontrol">Push Scope</span>.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264666</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >configd</a
          >
          process restarted when pushing configurations to multiple device
          groups via XML API, which caused the push to fail.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264662</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where HTTP POST requests were blocked for URLs that had
          the <span class="ph uicontrol">block-continue</span> category
          configured.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264538</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">VM-Series firewalls only</tt>) Fixed an issue where
          the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >all_task</a
          >
          process stopped responding and a reboot was required.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264289</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the CLI and XML API values for the show system
          environment command did not match.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264169</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">PA-5400 Series firewalls only</tt>) Fixed an issue
          where the firewall sent correlated event logs to the syslog server
          using the management interface instead of the log interface.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264053</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall stopped responding after the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >all_task</a
          >
          process stopped responding.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264040</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where AAAA DNS queries went out even when
          <span class="ph uicontrol">IPv6 firewalling</span> was disabled.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-263699</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          <tt class="ph tt">PA-440 firewalls only</tt>) Fixed an issue where the
          firewall was unable to create more than 6 GlobalProtect gateways.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-263680</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Prisma Access gateways consistently stopped
          responding with process restarts.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-263654</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where multiple DNS responses with different CNAME
          values caused evasion false positive alerts.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-263559</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the dataplane stopped responding and the firewall
          unexpectedly rebooted due to multiple process restarts.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-263544</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where management plane CPU usage increased after
          upgrading when there was a full-mesh User-ID redistribution
          configuration between multiple firewalls.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-263465</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >logrcvr</a
          >
          process stopped responding due to a memory leak and buffer overrun.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-263369</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where commits from Panorama to Panorama virtual
          appliances failed with the error message
          <span class="ph systemoutput"
            >Internal error during commit processing. Commit/Validate
            failed</span
          >
          after upgrading Panorama.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-263052</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <span class="ph systemoutput"
            >request logdb migrate-to-panorama start end-time &lt;start-time&gt;
            &lt;type&gt;</span
          >
          CLI command did not work as expected, and you were unable to resend
          logs from a firewall to Panorama or a log collector.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-263017</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall was unable to mount a disk partition
          due to a corrupted filesystem.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-262902</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on the web interface where cloning region objects did
          not work.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-262782</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on the firewall where
          <span class="ph systemoutput">cfg.developer.tasks</span> had a default
          configuration of <span class="ph systemoutput">True</span>, which
          capped dataplane CPU performance at 50% in production.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-262729</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">Panorama appliances only</tt>) Fixed an issue where
          the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >configd</a
          >
          process experienced continuous high CPU utilization and repeatedly
          restarted.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-262540</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where application traffic transactions that reused TCP
          ports did not work with decryption.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-262521</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where imported certificates were not visible on
          firewalls with multi-vsys disabled.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-262511</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on firewalls in HA configurations where OSPF neighbors
          were not established after an HA failover.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-262375</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >Firewalls in active/active HA configurations only</tt
          >) Fixed an issue where non-tunneled internal GlobalProtect gateway
          client information was not synced between firewall peers when using a
          floating IP address.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-262063</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall did not display the converted
          configurations before a commit and reboot, and the commit failed when
          attempting to migrate from MS to FRR mode.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-261998</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall configuration process restarted
          during an External Dynamic List refresh or a commit and push
          operation.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-261997</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall displayed incorrect statistics for
          mac_transmit_err and send_deffered on PA-440 appliances running PAN-OS
          10.1.9-h3.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-261935</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall unexpectedly rebooted when replacing
          or inserting SFPs from an old firewall into a new RMA firewall.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-261824</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where frequent
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >brdagent</a
          >
          errors occurred.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-261739</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >VM-Series firewalls in Microsoft Azure environments only</tt
          >) Fixed an issue where the firewall displayed 0 for the physical port
          counters read from MAC.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-261677</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where multiple
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >smartctl</a
          >
          processes entered a <span class="ph systemoutput">d</span> state due
          to failure to read from the kernel partition, which resulted in high
          CPU and management impact.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-261597</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >all_pktproc</a
          >
          process stopped responding, which caused the firewall to become
          unavailable.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-261570</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >Firewalls in active/active HA configurations only</tt
          >) Fixed an issue where packet loss occurred when dataport was used
          for HA3 for asymmetrically routed traffic during commits and a virtual
          wire was configured .
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-261371</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >PA-5410 firewalls in active/passive HA configurations only</tt
          >) Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >reportd</a
          >
          process restarted, which caused the firewall to reboot.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-261182</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall dropped a retransmitted SYN packet
          when using the TCP Fast Open option.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-261074</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall delayed video file transfers over
          SMB when <span class="ph uicontrol">Exclude Video Traffic</span> from
          the Tunnel feature was enabled and no applications were added to the
          list.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260827</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall consumed excessive CPU while
          processing traffic for a workload running on a GKE cluster, which
          caused reduced throughput.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260720</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >dsdc</a
          >
          process stopped responding after receiving an unexpected API return
          value.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260700</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall was unable to load application
          metadata from the chunk files. This occurred when the application
          metadata entry was larger than the buffer used to read it, which
          resulted in an incomplete entry that caused commit failures.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260581</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Panorama template changes to the zone and virtual
          router were not pushed to managed firewalls when the template stack
          default virtual system was set to
          <span class="ph uicontrol">None</span>.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260540</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where task-debug logs remained on the debug level even
          after running the
          <span class="ph systemoutput"
            >debug dataplane packet-diag set log off</span
          >
          CLI command, which caused high dataplane CPU utilization.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260417</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on Panorama where
          <span class="ph systemoutput">UpdateLicDB</span> was triggered every
          few minutes when firewalls with PAYG licenses were onboarded.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260358</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall did not include the NAS-ID and
          NAS-IP attributes in the RADIUS Access-Request message when using
          PEAP-MSCHAPv2 authentication.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260330</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Panorama was unable to generate PDF reports when
          the footer contained a GIF image.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260300</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >PA-5410, PA-5420, PA-5430, PA-5440 and PA-5445 firewalls only</tt
          >) Fixed an issue related to the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >all_pktproc</a
          >
          process where DPC slot 3 stopped responding.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260235</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall sent Threat logs and URL logs to an
          external syslog server without Security profile settings when Enhanced
          Application Logging was enabled.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260218</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where BGP Aggregate Advertise filters did not work as
          expected when the summary option was enabled, and only summarized
          routes were advertised.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260131</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall consumed a large amount of memory
          when forwarding raw logs.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260114</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall generated a
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >devsrvr</a
          >
          core file when processes were restarted.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260059</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where
          <span class="ph uicontrol">Device Telemetry Regions</span> did not
          show up with the latest content due to content files not being parsed
          for the region list when Telemetry was turned off.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-260003</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where commits failed when you set
          <span class="ph uicontrol">Use Management interface for all</span> and
          <span class="ph uicontrol">MGMT</span> was configured for
          <span class="ph uicontrol">Data Services</span>.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-259998</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">M-600 Appliances only</tt>) Fixed an issue where
          log collectors in a cluster stopped responding when running high load
          tests.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-259865</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >VM-Series firewalls across all public and private clouds</tt
          >) Fixed an issue where the firewall experienced high dataplane CPU
          usage when SSL Decryption was enabled.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-259741</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall dropped GRE keepalive packets that
          were encapsulated under another GRE tunnel.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-259610</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Wildfire content installation failed for WF-500B
          clusters when deployed from Panorama using the deployment schedule.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-259579</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the URL Filtering settings on a firewall
          displayed an override icon even when no settings were overridden. This
          occurred due to the
          <span class="ph uicontrol">hold-client-request</span> field did not
          have a default value and was set to
          <span class="ph uicontrol">False</span>.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-259370</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on the web interface where
          <span class="ph uicontrol"
            >Correlation Log Detail &gt; Match Evidence</span
          >
          did not populate.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-259078</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where WildFire Analysis reports were not generated and
          the following error message was displayed:
          <span class="ph uicontrol">Error 500: Internal Server Error</span>.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-259076</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall displayed an OCSP/CRL check failure
          when accessing websites.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-258576</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on the Panorama web interface where products in HIP
          objects were not displayed correctly.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-257960</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where ICD virtual memory continuously increased due to
          an increase in unknown IP addresses, which resulted in high management
          plane CPU utilization.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-257747</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall incorrectly displayed the error
          message
          <span class="ph systemoutput"
            >IoT Security license is required for feature to function</span
          >
          even when the firewall had a valid Enterprise IoT security license.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-257660</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where show commands were hidden for superusers in
          read-only roles.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-257619</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on Panorama where the
          <span class="ph uicontrol">Task Manager</span> took longer than
          expected to display managed firewall report tasks.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-257563</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >logrcvr</a
          >
          component for SASE and MCW displayed incorrect zones in the traffic
          flow.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-257362</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where GlobalProtect traffic destined for the internet
          did not follow the path-based forwarding (PBF) rule and was sent out
          the wrong interface.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-257195</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">PA-5400 Series firewalls only</tt>) Fixed an issue
          where the mp-monitor logs did not print disk SMART data.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-257183</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall dropped DNS traffic when using DNS
          Security.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-257117</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where CSV or PDF exports of zones did not contain all
          zones.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-257028</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >Firewalls in active/passive HA configurations only</tt
          >) Fixed an issue where firewalls entered a non-functional state and
          displayed the error message
          <span class="ph systemoutput"
            >Dataplane down: path monitor failure during the fail-over</span
          >.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-256867</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >logrcvr</a
          >
          process stopped responding while processing session logs for
          forwarding to the LFC.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-256670</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where scheduled email reports were sent without PDF
          attachments if the firewall was in FIPS-CC mode.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-256652</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where content updates were processed incorrectly, which
          caused a mismatch between a Threat ID's signature and its
          corresponding action.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-256518</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Panorama was unable to push firmware updates to a
          VM-Series firewall with a PAYG license.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-256362</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue in Panorama where shared address objects used in the
          GlobalProtect configuration agents were not considered as used and not
          pushed to Firewall that causes commit-all failure error
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-256138</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">VM-Series firewalls only</tt>) Fixed an issue where
          firewalls with a DNS server IP address received by DHCP from Amazon
          Web Services (AWS) had a delay in resolving FQDNs after a reboot.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-256077</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the GlobalProtect client would disconnect
          consistently due to keep-alive timeouts when using an SSL-only tunnel.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-256051</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on the firewall where enabling flow basic caused the
          firewall to stop responding due to a
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >masterd</a
          >
          process restart.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-256048</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where GlobalProtect displayed incorrect source region
          mapping in the Strata Logging Service.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-255915</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where a memory leak in the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >sslmgr</a
          >
          process caused the firewall to restart.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-255860</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">PA-5200 firewalls only</tt>) Fixed an issue where
          the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >all_pktproc</a
          >
          process stopped responding when the firewall was under a heavy traffic
          load.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-255773</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where errors related to applications in
          <span class="ph uicontrol">Content-preview</span> caused commit
          failures.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-255759</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall was unable to match HIP data with
          the correct anti-malware object for Windows Defender.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-255619</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an intermittent issue where file downloads from websites failed
          when decrypting HTTP/2 traffic.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-255025</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <span class="ph systemoutput">show session cache all</span> CLI
          command failed with the error message
          <span class="ph systemoutput"
            >Server error : An error occured. See dagger.log for
            information</span
          >.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-255020</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the Panorama web interface did not display the
          push scope data for custom admin users when performing a partial
          commit and push.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-254901</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where GlobalProtect user-to-IP address mapping was
          removed even though the tunnel for the specific user was up and
          traffic was being passed.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-254612</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on Panorama where the device health summary for
          firewalls showed <span class="ph uicontrol">1/1</span> in the power
          supply and fan columns instead of the actual number.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-254577</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where a core file was created on the Log Forwarding
          Card due to a third-party software issue.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-254297</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <span class="ph systemoutput">show pbf rule name &lt;name&gt;</span>
          CLI command failed.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-253965</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where modifying the IPSec lifesize setting was not
          reflected when using Proxy-ID between two VM-Series firewalls.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-253963</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >Panorama appliances in Panorama mode and Log Collector mode
            only</tt
          >) Fixed an issue where autocommits took longer than expected to
          complete.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-253819</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where a
          <span class="ph uicontrol">User Activity Report</span> was not
          generated by <span class="ph uicontrol">Run Now</span> or not emailed
          through the <span class="ph uicontrol">Email Schedule</span> when the
          locale setting was not English.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-253626</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on Panorama where unused objects were pushed to the
          firewall, which caused the push operations to intermittently fail.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-253485</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >Firewalls in active/passive HA configurations only</tt
          >) Fixed an issue where dataplane packet capture filter configuration
          failed on the active firewall with the error
          <span class="ph systemoutput"
            >op command for client dagger timed out as client is not
            available</span
          >.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-253437</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall did not display the
          Intrazone-Default Security policy rule hit count in the web interface
          when the rule was overridden by a Panorama configuration.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-252978</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">PA-3200 Series firewalls only</tt>) Fixed an issue
          where interfaces running at 10 Gbps did not display the speed and
          duplex information in the CLI or displayed only as
          <span class="ph systemoutput">auto</span>.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-252816</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where multiple SSHD process restarts triggered a
          firewall reboot when the login banner and SSH host keys were updated
          at the same time.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-252336</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where newly added devices or existing deleted devices
          on the primary Panorama appliance were not updated on the secondary
          Panorama appliance if the secondary Panorama appliance experienced an
          HA sync commit failure.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-252224</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Panorama did not forward logs to a syslog server
          over an SSL connection using CRL as a revocation verification method.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-251715</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall closed the SSL connection to the
          user ID agent.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-251533</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">PA-450 firewalls only</tt>) Fixed an issue on the
          web interface where the DHCPv6 client was not available for VLAN
          interfaces.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-251442</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall rebooted into maintenance mode if
          the authentication process restarted repeatedly.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-251038</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the selective push scope did not load the scope
          details when performing a commit and push operation when launched
          directly.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-250443</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">VM-Series firewalls only</tt>) Fixed an issue where
          multiple processes exited due to an OOM condition and caused a network
          outage.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-250146</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on the web interface where templates incorrectly showed
          that telemetry was enabled when it was not enabled. With this fix, the
          telemetry setting is not displayed in the template on the web
          interface.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-250082</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the traffic filter query operator did not work
          for <span class="ph uicontrol">sanctioned_state_of_app</span> (<span
            class="ph uicontrol"
            >Monitor &gt; Logs &gt; Traffic</span
          >).
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-249748</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where, when a dynamic address group with more than
          500,000 addresses was created, the firewall displayed the error
          message
          <span class="ph systemoutput"
            >pan_cfg_addresses_from_xmlhash failed</span
          >.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-249597</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the <span class="ph uicontrol">Policy</span> page
          on the Panorama web interface was slower than expected when a device
          group had a large number of managed devices.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-249581</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where stale BGP routes were advertised to peers even
          when they were not present in the local RIB table.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-249194</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where SaaS quality profile probes were dropped on the
          SD-WAN hub.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-249132</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on Panorama DG where the address group object created
          with <span class="ph uicontrol">Disable Override</span> property in
          Parent DG was overridden by child DG via CLI.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-248945</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where commits failed when you committed a configuration
          to advertise the default route (0.0.0.0/0) as a BGP network statement
          (<span class="ph uicontrol">Advanced Routing &gt; BGP settings</span
          >).
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-248748</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue that caused the dataplane to stop responding when
          running a packet diagnostic with Jumbo frames enabled.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-248390</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">PA-5450 firewalls only</tt>) Fixed an issue on the
          web interface where unused log interfaces were incorrectly displayed
          on the dashboard as configured and down.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-248221</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">PA-220 firewalls only</tt>) Fixed an issue where
          the firewall returned dedicated HA1 and HA2 even when the firewall did
          not have a dedicated HA port.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-247907</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">Panorama Virtual Appliances only</tt>) Fixed an
          issue where the root partition became full.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-247575</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the error message
          <span class="ph systemoutput"
            >import of &lt;issuecert&gt; failed. Please check the validity of
            the key pair and try again</span
          >
          for unmatched keys for EC certificates.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-247052</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an intermittent issue where the OSPF ABR option was disabled
          when a static route was added.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-246567</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where a firewall with a copper SFP transceiver
          (PAN-SFP-CG) flapped during a commit.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-246304</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on Panorama where commits failed due to a timeout in
          the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >sysd</a
          >
          process during decryption.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-245683</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where committing a configuration change on a Panorama
          managed firewall caused a short outage for GlobalProtect clients.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-244743</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where intermittent 500 errors occurred when making API
          calls to the firewall.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-244035</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">PA-5220 firewalls only</tt>) Fixed an issue on the
          web interface where the displayed dataplane CPU usage was up to 20%
          less than the correct CPU usage.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-243787</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the CLI command
          <span class="ph systemoutput">delete user-file ssh-known-hosts</span>
          did not remove the SSH host keys.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-243223</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where authentication to the GlobalProtect gateway
          failed due to an invalid Satellite certificate.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-243190</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the show commands for HSCI ports did not provide
          information about optics and light levels.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-242960</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall did not honor the peer
          <span class="ph uicontrol">Desired Minimum Tx Interval</span> when in
          a BFD INIT state.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-242957</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <span class="ph uicontrol">Rule usage</span> columns of overridden
          default policy rules on the Security policy page stopped responding.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-242826</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue with the REST API syntax when creating a DHCP server
          configuration for an existing subinterface.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-242431</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the BGP timer setting was in read-only mode for
          custom admin users when Advanced Routing was enabled.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-241953</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall did not have a heartbeat mechanism
          for the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >authd</a
          >
          process, which caused the firewall to become unresponsive if the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >authd</a
          >
          process stopped responding.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-241772</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where, when TLSv1.3 was used, an incorrect error
          message <span class="ph systemoutput">invalid padding</span> was
          displayed instead of the expected error message
          <span class="ph systemoutput">Invalid server certificate</span>.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-241474</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">PA-5200 Series firewalls only</tt>) Fixed an issue
          where the firewall did not increment the flow_parse_ip_cksm counter
          when traffic with an IP address checksum error was received.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-241126</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the client IP address was incorrect in the
          authentication logs for Captive Portal authentication events when the
          client used IPv6.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-239470</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the CLI command
          <span class="ph systemoutput"
            >device-telemetry reload-config-now</span
          >
          did not work as expected on firewall.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-239252</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where GlobalProtect connections failed with the error
          message:
          <span class="ph systemoutput"
            >Disconnect(Lifetime expired) called</span
          >
          before the lifetime expired.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-238594</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall rebooted when a QSFP28 cable was
          removed from the port while the port was passing traffic.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-238303</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">PA-5220 firewalls only</tt>) Fixed an issue where
          multicast streaming did not recover when multicast traffic was
          offloaded.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-238266</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the default
          <span class="ph systemoutput">lag-flow-key-type</span> was different
          between the dataplane and the forwarding engine.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-238183</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Panorama displayed deviating device system logs
          for non-connected interfaces.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-237819</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Panorama was unable to establish netstat
          connectivity with the syslog server when the password for an HTTPS
          server profile had more than 128 characters.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-237109</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the application page was not launched directly
          after the login page when only one application was configured.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-237010</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on Panorama where local commits took longer than
          expected after an upgrade.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-235976</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the LDAP server profile created was created with
          an empty password.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-235808</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">Panorama appliances in Log Collector mode only</tt
          >) Fixed an issue where an unnamed core file was generated after a
          reboot.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-235733</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the displayed NTP information was incorrect if
          the DNS servers timed out.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-235475</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where firewall sinkhole functionality was disrupted
          when a domain entry in an external dynamic list started with a period
          (.) character.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-234272</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where scheduled device group reports included data from
          other device groups.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-233868</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall took an incorrect action for
          overlapping custom and edl-url-categories in a policy rule.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-233815</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where syslog-ng restarted after commits when multiple
          syslog servers were configured.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-233647</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Panorama management servers generated duplicate
          configuration logs.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-233581</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on firewalls in active/active HA configurations where
          SYN+ACK packets of asymmetric TCP sessions were dropped because of a
          session synchronization issue.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-232594</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >Panorama managed CN-Series firewalls in HA configurations only</tt
          >) Fixed an issue where an error occurred while adding tags.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-232268</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on the firewall where enabling the
          <span class="ph uicontrol">SSL Decryption Opt-out</span> caused all
          SSL sessions to fail.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-230934</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where HTTPS, SSH, and PING were enabled on the AUX port
          by default even when these administrative management services were not
          enabled on the interface.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-228555</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where GlobalProtect logs returned no data when using
          the filter
          <span class="ph systemoutput">( private_ip eq 0.0.0.0 )</span>.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-227165</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >snmpd</a
          >
          process stopped responding due to a double free during data collection
          on active sessions.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-225213</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where
          <span class="ph uicontrol">Push All Changes</span> displayed changes
          that were already committed in the push scope for another device group
          after performing a selective commit and selective push to the first
          device group.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-224833</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall dropped DHCPv6 relay packets if
          there were duplicate link-local addresses on different sub-interfaces.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-224272</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">PA-7500 Series firewalls only</tt>) Fixed an issue
          where the L3 subinterface was grayed out and displayed the status
          <span class="ph uicontrol">ethernet1/12.1082: unknown</span>.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-224152</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where device tags for devices in a child device group
          were not available in the the parent shared device group.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-223172</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on Panorama where host IDs manually added to the device
          quarantine list were unexpectedly removed.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-222542</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">PA-7000 Series firewalls only</tt>) Fixed an issue
          where Log Forward Cards (LFC) were incorrectly identified as
          distribution policies, which caused packet loss due to traffic, BFD,
          and other control packets being forwarded to the LFC.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-222307</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt">M-600 appliances only</tt>) Fixed an issue where
          the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >reportd</a
          >
          process stopped responding.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-221021</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where managed DLCs were out of sync after changing the
          Panorama mode to Management Only mode.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-220619</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the correct device filter did not apply when
          filtering <span class="ph uicontrol">Targets</span> and
          <span class="ph uicontrol">Target/Tags</span> (<span
            class="ph uicontrol"
            >Device Group &gt; Policies</span
          >).
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-220227</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where High Availability Path Monitoring did not work
          with Advanced Routing Mode when the type was set to
          <span class="ph uicontrol">Logical Router</span>.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-216688</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the configurations exported by a role-based admin
          user via the web interface were not sanitized.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-212889</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on Panorama where different threat names were used when
          querying a threat under
          <span class="ph uicontrol">Threat Monitor</span> (<span
            class="ph uicontrol"
            >Monitor &gt; App Scope</span
          >) and the ACC. This resulted in the ACC displaying no data after
          clicking a threat name in
          <span class="ph uicontrol">Threat Monitor</span> and filtering it in
          the global filters.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-212735</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where sessions that were previously in sw-cut-through
          mode (software fast forwarding) and persisted after an HA failover
          were no longer subject to software fast forwarding, which led to
          increased dataplane CPU load after HA failover.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-212182</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where TLS 1.3 connections failed if the server sent a
          certificate request after sending its certificate.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-209844</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall logged duplicate events for
          portal-gen-cookie, gateway-gen-cookie, and gateway-auth when the
          authentication was successful.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-202095</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on the web interface where the language setting was not
          retained.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-201548</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall did not provision host ID entries
          when the number of open file descriptors (FDS) for redis_iotd reached
          the maximum allowed value.
        </div>
      </td>
    </tr>

    <tr class="row rowsep">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-180513</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the Source Translation section of the NAT rule
          did not provide an option to check the value for an object.
        </div>
      </td>
    </tr>
  </tbody>
</table>