101 lines
2.6 KiB
Markdown
101 lines
2.6 KiB
Markdown
---
|
|
type: Addressed
|
|
product: PAN-OS
|
|
version: 11.1.4-h25
|
|
---
|
|
|
|
## PAN-292261
|
|
|
|
Fixed an issue where the firewall repeatedly reported an unreachable
|
|
syslog server as back online when the
|
|
server remained unavailable. This resulted in misleading alternating
|
|
connection status messages in the system logs.
|
|
|
|
## PAN-287423
|
|
|
|
Fixed an issue where content loading issues occurred on IPv6 websites
|
|
due to the firewall incorrectly setting the IPv6 header flow label
|
|
to 0.
|
|
|
|
## PAN-286255
|
|
|
|
Fixed an issue where, when the firewall received an unexpected
|
|
termination request for SSL sessions, the dataplane experienced a
|
|
slow buffer resource leak.
|
|
|
|
## PAN-282069
|
|
|
|
Fixed an issue on Panorama where Security policy rules were removed
|
|
from device groups when you cloned or edited Security policy rules
|
|
that used more than 63 characters.
|
|
|
|
## PAN-280942
|
|
|
|
Fixed an issue where the logrcvr process stopped
|
|
responding.
|
|
|
|
## PAN-280698
|
|
|
|
Fixed an issue where the firewall removed the TCP timestamp from
|
|
client hello messages that did not fit in a single packet, which
|
|
resulted in connection issues.
|
|
|
|
## PAN-279901
|
|
|
|
An issue was fixed where the firewall dropped fragmented TLS
|
|
ClientHello packets, which blocked access to certain websites. This
|
|
occurred because the packets arrived truncated, in varying sizes and
|
|
orders, and the firewall's heuristics failed to handle them
|
|
correctly.
|
|
|
|
To enable this fix, run: debug dataplane set ssl-decrypt
|
|
accumulate-client-hello disjoined yes.
|
|
|
|
## PAN-273949
|
|
|
|
Fixed an issue where the firewall generated the following error
|
|
message in the snmpd logs:
|
|
pan_get_keystr_from_cryptod(pan_snmpinterface.c:181):
|
|
Key X2F1dGhfa2V5 import from cryptod failed.
|
|
|
|
## PAN-271273
|
|
|
|
Fixed an issue where dynamic update downloads failed when
|
|
IPv6 firewalling was enabled on the
|
|
firewall and both IPv4 and IPv6 were configured on the management
|
|
interface.
|
|
|
|
## PAN-270193
|
|
|
|
Fixed an issue where the Panorama management server changed its
|
|
certificate authority (CA) unexpectedly, which caused managed
|
|
firewalls to disconnect.
|
|
|
|
## PAN-268614
|
|
|
|
Fixed an issue on the web interface where, when all rules were
|
|
highlighted when a read-only admin user clicked the
|
|
Highlight Unused Rules checkbox.
|
|
|
|
## PAN-265621
|
|
|
|
Fixed an issue where the restart option for
|
|
IPSec tunnels was greyed out when you attempted to restart the
|
|
tunnel from NetworkIPSec TunnelsIKE Info.
|
|
|
|
## PAN-260300
|
|
|
|
```caveat
|
|
PA-5410, PA-5420, PA-5430, PA-5440 and PA-5445 firewalls only
|
|
```
|
|
|
|
Fixed an issue related to the
|
|
all_pktproc process where DPC slot 3 stopped
|
|
responding.
|
|
|
|
## PAN-259535
|
|
|
|
Fixed an issue where the firewall failed to boot up after running
|
|
power cycle tests due to ehmon process heartbeat
|
|
failures.
|