firewallissues/reference/PAN-OS/addressed/10.2.11-h12.html

<table class="table colsep rowsep table-striped">
  <!--cq:include script="../../common/tablestack.jsp" /-->

  <colgroup>
    <col style="width: 25%" />
    <col style="width: 75%" />
  </colgroup>
  <thead class="thead">
    <tr class="row rowsep">
      <th class="entry">
        <div class="p"><b class="ph b">Issue ID</b></div>
      </th>
      <th class="entry">
        <div class="p"><b class="ph b">Description</b></div>
      </th>
    </tr>
  </thead>

  <tbody class="tbody">
    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-279604</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where scheduled SaaS application usage reports were
          generated incorrectly, and the login page was displayed instead of the
          report content.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273994</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          A fix was made to address
          <a
            class="xref"
            href="https://security.paloaltonetworks.com/CVE-2025-0111"
            title=""
            data-scope="external"
            data-format="html"
            data-type=""
            target="_blank"
            >CVE-2025-0111</a
          >.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273971</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          A fix was made to address
          <a
            class="xref"
            href="https://security.paloaltonetworks.com/CVE-2025-0108"
            title=""
            data-scope="external"
            data-format="html"
            data-type=""
            target="_blank"
            >CVE-2025-0108</a
          >.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-273278</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          A fix was made to address
          <a
            class="xref"
            href="https://security.paloaltonetworks.com/CVE-2025-0109"
            title=""
            data-scope="external"
            data-format="html"
            data-type=""
            target="_blank"
            >CVE-2025-0109</a
          >.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-271926</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where TLS 1.3 decryption failed with a bad record MAC
          error when the firewall was configured to decrypt and inspect TLS
          traffic.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-270549</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where some TLS connections were not handled correctly,
          which led to instability in the dataplane.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-269731</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Panorama did not display logs from firewalls
          after upgrading to PAN-OS 10.2.11 on devices due to Elasticsearch (ES)
          getting restarted continuously.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268727</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where traffic was dropped when the accumulation proxy
          was enabled and header insertion modified packets.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268319</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where
          <span class="ph uicontrol">Receive Time</span> and
          <span class="ph uicontrol">Time Generated</span> were not visible as
          attributes in the <span class="ph uicontrol">Filter Builder</span> for
          system logs and URL filtering logs.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-268260</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on hardware firewalls where, when SSL decryption was
          enabled and Client Hello messages spanned multiple TCP segments, some
          SSL decrypted sessions failed.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-267781</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where Panorama did not display the Source Dynamic
          Address Group.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-264762</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the firewall showed the status of SFP+ interfaces
          as not up, or up but not configured, when a PAN-SFP-PLUS-SR cable was
          connected.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-263465</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >logrcvr</a
          >
          process stopped responding due to a memory leak and buffer overrun.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-261739</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          (<tt class="ph tt"
            >VM-Series firewalls in Microsoft Azure environments only</tt
          >) Fixed an issue where the firewall displayed 0 for the physical port
          counters read from MAC.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-259351</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          A fix was made to address
          <a
            class="xref"
            href="https://security.paloaltonetworks.com/CVE-2024-3393"
            title=""
            data-scope="external"
            data-format="html"
            data-type=""
            target="_blank"
            >CVE-2024-3393</a
          >.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-256051</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue on the firewall where enabling flow basic caused the
          firewall to stop responding due to a
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >masterd</a
          >
          process restart.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-255619</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an intermittent issue where file downloads from websites failed
          when decrypting HTTP/2 traffic.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-249597</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where the <span class="ph uicontrol">Policy</span> page
          on the Panorama web interface was slower than expected when a device
          group had a large number of managed devices.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-241004</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where DNS Proxy dropped client requests of the type
          <span class="ph systemoutput">ns</span> for a root domain.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-233965</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue here the
          <a
            class="term"
            href="#"
            title=""
            data-scope=""
            data-format="dita"
            data-type=""
            target="_self"
            >tund</a
          >
          process stopped responding, which caused push operation to managed
          firewalls or making changes to local firewalls to fail.
        </div>
      </td>
    </tr>

    <tr class="row">
      <td class="entry">
        <div class="p"><b class="ph b">PAN-230825</b></div>
      </td>
      <td class="entry relcol">
        <div class="p">
          Fixed an issue where link flaps occurred on Panorama appliances in HA
          configurations.
        </div>
      </td>
    </tr>
  </tbody>
</table>