firewallissues/reference/PAN-OS/addressed/11.2.4-h11.html

<table class="table colsep rowsep table-striped">
  <!--cq:include script="../../common/tablestack.jsp" /-->

  <colgroup>
    <col style="width: 25%" />
    <col style="width: 75%" />
  </colgroup>
  <thead class="thead">
    <tr class="row rowsep">
      <th class="entry">
        <div class="p"><b class="ph b">Issue ID</b></div>
      </th>
      <th class="entry">
        <div class="p"><b class="ph b">Description</b></div>
      </th>
    </tr>
  </thead>

  <tbody class="tbody">
    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-291499</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >VM-Series firewalls on Amazon Web Services (AWS) environments
            only</tt
          >) Fixed an issue where newly deployed firewalls were unable to
          connect to the Palo Alto Networks Software License Server (SLS) until
          after a reboot, license fetch, or management server restart.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-290803</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >VM-Series firewalls on Microsoft Azure environments only</tt
          >) Fixed an issue where firewall failed to bootstrap with a custom
          image, and VM-Series plugin information was not displayed in the
          system information.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-290241</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >useridd</a
          >
          process became unresponsive, which caused User ID CLI commands to time
          out.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-288939</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >logrcvr</a
          >
          process stopped responding due to an invalid SSL context being used
          for socket communication, which caused commits to fail.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-287688</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall failed to connect to the Palo Alto
          Networks update server when using a customized service route with the
          source interface as <span class="ph uicontrol">MGT</span>.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-279901</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          An issue was fixed where the firewall dropped fragmented TLS
          ClientHello packets, which blocked access to certain websites. This
          occurred because the packets arrived truncated, in varying sizes and
          orders, and the firewall's heuristics failed to handle them correctly.
        </div>
        <div class="p">
          To enable this fix, run:
          <span class="ph systemoutput"
            >debug dataplane set ssl-decrypt accumulate-client-hello disjoined
            yes</span
          >
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268680</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >configd</a
          >
          process stopped responding when a configuration merge operation
          changed.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268522</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall failed to connect to the update
          server with a customized service route when the source interface was
          set to <span class="ph uicontrol">MGT</span> and the source address
          was set as IPv4.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-255914</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >VM-Series firewalls on Amazon Web Services (AWS) environments
            only</tt
          >) Fixed an issue where a newly bootstrapped firewall required a
          management server restart, relicensing, or license push from Panorama
          to invoke the device certificate.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-241230</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the SNMP get request status value for Panorama
          connections was incorrect.
        </div>
      </td>
    </tr>
  </tbody>
</table>