100 lines
3.3 KiB
Markdown
100 lines
3.3 KiB
Markdown
---
|
|
type: Addressed
|
|
product: PAN-OS
|
|
version: 9.1.17
|
|
source: common-crawl
|
|
crawl: CC-MAIN-2026-12
|
|
---
|
|
|
|
## PAN-237935
|
|
|
|
Extended the offline PAN-DB, Panorama, and WildFire certificates which were previously set to expire on September 2, 2024.
|
|
|
|
## PAN-228043
|
|
|
|
Fixed an issue on firewalls on active/active HA configurations where packets dropped during commit operations when forwarding traffic via an HA3 link when an aggregate ethernet interface or data interface was used as an HA3 link.
|
|
|
|
## PAN-223317
|
|
|
|
Fixed an issue where SSL traffic failed with the error message: Error: General TLS protocol error.
|
|
|
|
## PAN-221637
|
|
|
|
Fixed an issue where User ID logs for logout events displayed incorrect factor completion times.
|
|
|
|
## PAN-218404
|
|
|
|
Fixed an issue where ikemgr stopped responding due to receiving CREATE_CHILD messages with a malformed SA payload.
|
|
|
|
## PAN-217681
|
|
|
|
Fixed an issue caused by out of order TCP segments where the TCP retransmission failed when the TCP segment had the FIN flag and the TCP data was truncated.
|
|
|
|
## PAN-215576
|
|
|
|
Fixed an issue where the userID-Agent and TS-Agent certificates were set to expire on November 18, 2024. With this fix, the expiration date has been extended to January 2032.
|
|
|
|
## PAN-210883
|
|
|
|
Fixed an issue where SSL proxy traffic was dropped when DoS Zone protection was enabled.
|
|
|
|
## PAN-207003
|
|
|
|
Fixed an issue where the logrcvr process netflow buffer was not reset which resulted in duplicate netflow records.
|
|
|
|
## PAN-202593
|
|
|
|
Fixed an issue where expanding Global Find results displayed only the top level and second level of a searched item.
|
|
|
|
## PAN-199557
|
|
|
|
Fixed an issue on Panorama where virtual memory usage exceeded the set limit, which caused the configd process to restart.
|
|
|
|
## PAN-198372
|
|
|
|
Fixed an issue where the root-cert was set to expire on December 31, 2023. With this fix, the expiration date has been extended.
|
|
|
|
## PAN-198174
|
|
|
|
Fixed an issue where, when viewing traffic or threat logs from the **Application Command Center** (ACC) or **Monitor** tabs, performing a reverse DNS lookup caused the dnsproxy process to restart if DNS server settings were not configured.
|
|
|
|
## PAN-197935
|
|
|
|
Fixed an intermittent issue where XML API IP address tag registration failed on firewalls in a multivsys environment.
|
|
|
|
## PAN-197426
|
|
|
|
Fixed an issue on Panorama where, when attempting to view the **Monitor** page, the error message **invalid term** was displayed.
|
|
|
|
## PAN-196956
|
|
|
|
Fixed an issue where URL filtering logs did not display matching entries when filtered by device name.
|
|
|
|
## PAN-192431
|
|
|
|
Fixed an issue where unmanaged tags were set to NULL, which caused unmanaged devices to match the HIP rule for managed devices. As a result, you were unable to distinguish between managed and unmanaged devices.
|
|
|
|
## PAN-191867
|
|
|
|
Fixed an issue where CPU stalls resulted in a slot restart.
|
|
|
|
## PAN-190903
|
|
|
|
Fixed an issue where MAC addresses in threat capture were swapped between the source MAC and destination MAC addresses.
|
|
|
|
## PAN-189182
|
|
|
|
Fixed an issue where the change summary didn't work after upgrading the Panorama appliance.
|
|
|
|
## PAN-184630
|
|
|
|
Fixed an issue where TLS clients, such as those using OpenSSL 3.0, enforced the TLS renegotiation extension (RFC 5746).
|
|
|
|
## PAN-160633
|
|
|
|
```caveat
|
|
PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls only
|
|
```
|
|
|
|
Fixed an issue where the dataplane restarted repeatedly due to an internal path monitoring failures until a power cycle.
|