74 lines
2.7 KiB
Markdown
74 lines
2.7 KiB
Markdown
---
|
|
type: Addressed
|
|
product: PAN-OS
|
|
version: 11.1.0
|
|
---
|
|
|
|
## PAN-233557
|
|
|
|
Fixed an issue where, after using Panorama to configure per policy persistent DIPP, downgrading the firewall using Panorama and then upgrading the firewall back to a later PAN-OS release, the global DIPP configuration was not successfully converted b ack to the per policy persistent DIPP rules.
|
|
|
|
## PAN-230359
|
|
|
|
Fixed an issue where SAML authentication failed with the error message Failed to verify signature against certificate when ds:KeyName was in the IdP metadata.
|
|
|
|
## PAN-227639
|
|
|
|
Fixed an issue where the ACC displayed an incorrect DNS-base application traffic byte count.
|
|
|
|
## PAN-227376
|
|
|
|
Fixed an issue where a memory overrun caused the all_task process to stop responding.
|
|
|
|
## PAN-227368
|
|
|
|
Fixed an issue where GlobalProtect users could not connect the app to a portal or gateway and GlobalProtect Clientless VPN users were unable to access applications when authentication took longer than 20 seconds.
|
|
|
|
## PAN-226418
|
|
|
|
A CLI command was added to address an issue where long-lived sessions aged out even when there was ongoing traffic.
|
|
|
|
## PAN-226198
|
|
|
|
Fixed an issue on Panorama where the configd process repeatedly restarted when attempting to make configuration changes.
|
|
|
|
## PAN-225920
|
|
|
|
Fixed an issue where duplicate predict sessions didn't release NAT resources.
|
|
|
|
## PAN-225886
|
|
|
|
Fixed an issue where if you enabled explicit proxy mode for the web proxy, intermittent errors and unexpected TCP reconnections may have occurred.
|
|
|
|
## PAN-225169
|
|
|
|
Added a CLI command to view Strata Logging Service queue usage.
|
|
|
|
## PAN-224772
|
|
|
|
Fixed a high memory usage issue with the mongodb process that caused an OOM condition.
|
|
|
|
## PAN-224145
|
|
|
|
Fixed an issue in multi-vsys environments where, when Panorama was on a PAN-OS 10.2 release and the firewall was on a PAN-OS 10.1 release, commits failed on the firewall when inbound inspection mode was configured in the decryption policy rule.
|
|
|
|
## PAN-223457
|
|
|
|
Fixed an issue where, if the number of group queries exceeded the Okta rate limit threshold, the firewall cleared the cache for the groups.
|
|
|
|
## PAN-221126
|
|
|
|
Fixed an issue where email server profiles (Device > Server Profiles > Email and Panorama > Server Profiles > Email) to forward logs as email notifications were not forwarded in a readable format.
|
|
|
|
## PAN-218555
|
|
|
|
Fixed an issue where the firewall did not receive dynamic address updates pushed from Panorama during initial registration to Panorama.
|
|
|
|
## PAN-213931
|
|
|
|
Fixed an issue where the logrcvr process cache was not in sync with the mapping on the firewall.
|
|
|
|
## PAN-206913
|
|
|
|
Fixed an issue where, when DHCPv6 client was configured on firewalls in active/passive HA configurations, releasing the IPv6 address from the client released the IPv6 address from only the active firewall.
|