224 lines
8.3 KiB
Markdown
224 lines
8.3 KiB
Markdown
---
|
|
type: Addressed
|
|
product: PAN-OS
|
|
version: 9.1.16
|
|
source: common-crawl
|
|
crawl: CC-MAIN-2026-12
|
|
---
|
|
|
|
## PAN-235168
|
|
|
|
Fixed an issue where disk space became full even after clearing old logs and content images.
|
|
|
|
## PAN-216656
|
|
|
|
Fixed an issue where the firewall was unable to fully process the user list from a child group when the child group contained more than 1,500 users.
|
|
|
|
## PAN-215911
|
|
|
|
Fixed an issue that resulted in a race condition, which caused the configd process to stop responding.
|
|
|
|
## PAN-215488
|
|
|
|
Fixed an issue where an expired Trusted Root CA was used to sign the forward proxy leaf certificate during SSL Decryption.
|
|
|
|
## PAN-211997
|
|
|
|
Fixed an issue where large OSPF control packets were fragmented, which caused the neighborship to fail.
|
|
|
|
## PAN-211602
|
|
|
|
Fixed an issue where, when viewing a WildFire Analysis Report via the web interface, the **detailed log view** was not accessible if the browser window was resized.
|
|
|
|
## PAN-209696
|
|
|
|
Fixed an issue where link-local address communication for IPv6, BFD, and OSPFv3 neighbors was dropped when IP address spoofing check was enabled in a Zone Protection profile.
|
|
|
|
## PAN-207740
|
|
|
|
Fixed an issue that resulted in a race condition, which caused the configd process to stop responding.
|
|
|
|
## PAN-205453
|
|
|
|
Fixed an issue where running reports or queries under a user group caused the reportd process to stop responding.
|
|
|
|
## PAN-203563
|
|
|
|
Fixed an issue with Content and Threat Detection allocation storage space where performing a commit failed with a CUSTOM_UPDATE_BLOCK error message.
|
|
|
|
## PAN-203402
|
|
|
|
Fixed an intermittent issue where forward session installs were delayed, which resulted in latencies.
|
|
|
|
## PAN-203147
|
|
|
|
```caveat
|
|
Firewalls in FIPS-CC mode only
|
|
```
|
|
|
|
Fixed an issue where the firewall unexpectedly rebooted when downloading a new PAN-OS software image.
|
|
|
|
## PAN-201910
|
|
|
|
PAN-OS security profiles might consume a large amount of memory depending on the profile configuration and quantity. In some cases, this might reduce the number of supported security profiles below the stated maximum for a given platform.
|
|
|
|
## PAN-201639
|
|
|
|
Fixed an issue with Saas Application Usage reports where **Applications with Risky Characteristics** displayed only two applications per section.
|
|
|
|
## PAN-199612
|
|
|
|
Fixed a sync issue with firewalls in active/active HA configurations.
|
|
|
|
## PAN-198871
|
|
|
|
Fixed an issue when both URL and Advanced URL licenses were installed, the expiry date was not correctly checked.
|
|
|
|
## PAN-198693
|
|
|
|
Fixed an issue where decrypted SSH sessions were interrupted with a decryption error.
|
|
|
|
## PAN-198038
|
|
|
|
A CLI command was added to address an issue where long-lived sessions were aging out even when there was ongoing traffic.
|
|
|
|
## PAN-197919
|
|
|
|
Fixed an issue where, when path monitoring for a static route was configured with a new Ping Interval value, the value was not used as intended.
|
|
|
|
## PAN-197847
|
|
|
|
Fixed an issue where disabling the enc-algo-aes-128-gcm cipher did not work when using an SSL/TLS profile.
|
|
|
|
## PAN-197729
|
|
|
|
Fixed an issue where repeated configuration pushes from Panorama resulted in a management server memory leak.
|
|
|
|
## PAN-197576
|
|
|
|
Fixed an issue where commits pushed from Panorama caused a memory leak related to the mgmtsrvr process.
|
|
|
|
## PAN-197219
|
|
|
|
Fixed an issue where the following error message was not sent from multi-factor authentication PingID and did not display in the browser: Your company has enhanced its VPN authentication with PingID. Please install the PingID app for iOS or Android, and use pairing key:<key>. To connect, type "ok".
|
|
|
|
## PAN-195790
|
|
|
|
Fixed an issue where syslog traffic that was sent from the management interface to the syslog server even when a destination IP address service route was configured.
|
|
|
|
## PAN-195583
|
|
|
|
Fixed an issue where, after renaming an object, configuration pushes from Panorama failed with the commit error **object name is not an allowed keyword**.
|
|
|
|
## PAN-194175
|
|
|
|
Fixed an issue on Panorama where a commit push to managed firewalls failed when objects were added as source address exclusions in a Security policy and **Share Unused Address and Service Objects with Devices** was unchecked.
|
|
|
|
## PAN-193808
|
|
|
|
Fixed a memory leak issue in the mgmtsrvr process that resulted in an OOM condition.
|
|
|
|
## PAN-193763
|
|
|
|
Fixed an issue on the firewall where the dataplane CPU spiked, which caused traffic to be affected during commits or content updates.
|
|
|
|
## PAN-192681
|
|
|
|
Fixed an issue where HIP database storage on the firewall reached full capacity due to the firewall not purging older HIP reports.
|
|
|
|
## PAN-190950
|
|
|
|
Fixed an issue where creating or modifying a GlobalProtect portal configuration failed in FIPS mode with the following error message: clientless-vpn enc-algo-rc4 unexpected here.
|
|
|
|
## PAN-189518
|
|
|
|
Fixed an issue where incoming DNS packets with looped compression pointers caused the dnsproxyd process to stop responding.
|
|
|
|
## PAN-189379
|
|
|
|
Fixed an issue where FQDN based Security policy rules did not match correctly.
|
|
|
|
## PAN-187829
|
|
|
|
Fixed an issue where the web_backend and httpd processes leaked descriptors, which caused activities that depended on the processes, such as logging in to the web interface, to fail.
|
|
|
|
## PAN-187761
|
|
|
|
Fixed an issue where, during HA failover, the newly passive firewall continued to pass traffic after the active firewall had already taken over.
|
|
|
|
## PAN-184537
|
|
|
|
Fixed an issue where GlobalProtect requested for passwords that contained non ASCII characters (ö) to be reentered when refreshing the connection.
|
|
|
|
## PAN-183319
|
|
|
|
Fixed an issue on Panorama where commits remained at 99% due to multiple firewalls sending out CSR singing requests every 10 minutes.
|
|
|
|
## PAN-183297
|
|
|
|
Fixed an issue where, when the firewall received a large amount of user information, the firewall was unable to output IP-address to username mapping information via XML API.
|
|
|
|
## PAN-183126
|
|
|
|
Fixed an issue on Panorama where you were able to attempt to push a number of active schedules to the firewall that was greater than the firewall's maximum capacity.
|
|
|
|
## PAN-182845
|
|
|
|
Fixed an issue that caused devices to be removed from Panorama when one device was added by one user, but a Commit and Push operation was completed by a second user before the first user completed a Commit of the added device change.
|
|
|
|
## PAN-181839
|
|
|
|
Fixed an issue where Panorama Global Search reported **No Matches found** while still returning results for matching entries on large configurations.
|
|
|
|
## PAN-181759
|
|
|
|
```caveat
|
|
Firewalls in active/active HA configurations only
|
|
```
|
|
|
|
Fixed an issue where firewall configuration files were not synced.
|
|
|
|
## PAN-181295
|
|
|
|
Fixed an issue where clicking on a rule in the **App Dependency** tab after a commit or commit all did not display the rule correctly.
|
|
|
|
## PAN-179624
|
|
|
|
Fixed an issue where setting the password complexity to **Require Password Change on First Login** caused the user to be prompted with certificate authentication.
|
|
|
|
## PAN-177942
|
|
|
|
Fixed an issue where, when grouping HA peers, access domains that were configured using multi-vsys firewalls deselected devices or virtual systems that were in other configured access domains.
|
|
|
|
## PAN-177054
|
|
|
|
Fixed an issue where, when you disabled a NAT rule, the **Destination Translation** value **none** displayed in blue and was still able to be modified to a different value.
|
|
|
|
## PAN-175176
|
|
|
|
Fixed an issue in which CBC ciphers for TLS traffic to port 28443 on Panorama were enabled.
|
|
|
|
## PAN-174680
|
|
|
|
Fixed an issue where, when adding new configurations, Panorama didn't display a list of suggested template variables when typing in a relevant field.
|
|
|
|
## PAN-173179
|
|
|
|
Fixed an issue where the rem_addr field in Terminal Access Controller Access-Control System (TACACS+) authentication displayed the management or service route IP address of the firewall instead of the source IP address of the user.
|
|
|
|
## PAN-161958
|
|
|
|
Fixed an issue where the FQDN refresh timer was pushed from Panorama appliances on PAN-OS 9.0 and later releases to firewalls running a PAN-OS 8.1 release.
|
|
|
|
## PAN-158511
|
|
|
|
Fixed an issue where configurations loaded and committed to Panorama changed external dynamic list references on Security policy rules to **NONE** when Antivirus Protection was not installed.
|
|
|
|
## PAN-143930
|
|
|
|
Fixed an issue where a process (routed) restarted due to the number of BGP peers exceeding the supported configuration.
|
|
|
|
## PAN-78762
|
|
|
|
Fixed an issue where you were unable to reset a VPN tunnel via the firewall web interface (**Network > IPSec Tunnels > Tunnel Info > Restart**).
|