8.7 KiB
type, product, version, source, crawl
| type | product | version | source | crawl |
|---|---|---|---|---|
| Addressed | PAN-OS | 10.2.13-h7 | common-crawl | CC-MAIN-2026-12 |
PAN-286255
Fixed an issue where, when the firewall received an unexpected termination request for SSL sessions, the dataplane experienced a slow buffer resource leak.
PAN-283813
Fixed an issue on Panorama where the web interface performance was slower than usual when retrieving read-only configurations from Panorama.
PAN-282394
Fixed an issue where a firewall was only able to display a maximum of 14 permitted IP addresses from a Panorama Template Variable.
PAN-282236
Fixed an issue where large IPv6 packets were reassembled incorrectly on the firewall when the packets arrived fragmented over an IPv4 tunnel.
PAN-279621
Fixed an issue where processes stopped responding when HTTPS Forward traffic was run.
PAN-279400
Fixed an issue where, when Restrict Certificate Extensions was enabled on decryption profiles, the basic constraints extension was overwritten incorrectly.
PAN-278150
Fixed an issue where the firewall removed the Authentication Key Identifier (AKID) from the certificate during SSL decryption, which caused Python 3.13 to fail with a certificate verification error.
PAN-277417
Fixed an memory leak issue related to TLS inbound decryption.
PAN-277234
Fixed an issue where a device group import resulted in a Security policy rule being created with Application set to none.
PAN-277147
Fixed an issue where daily scheduled reports were not generated and emailed.
PAN-276678
Fixed an issue where Panorama became unresponsive while performing a dynamic address update without a lock.
PAN-275077
Fixed an issue where DNS Security intermittently logs malicious domain URLs as Alert instead of taking a Sinkhole action, even when configured to Sinkhole malicious DNS domains.
PAN-274797
Fixed an issue where a DPC on slot 3 failed intermittently due to the pktlog_forwarding process restarting, which resulted in an unexpected HA failover.
PAN-274726
Fixed an issue where Wildfire signature generation was enabled on all nodes in a cluster instead of only the active node.
PAN-273964
Fixed an issue where SNMP scans to a firewall timed out after upgrading to a PAN-OS 10.2 release.
PAN-273453
Fixed an issue where restarting the firewall did not initiate an autocommit job, which caused the firewall to stop responding and the HA interface to go down.
PAN-273141
Fixed an issue where GlobalProtect clients experienced slow file transfer download throughput when passing through an IPSec tunnel.
PAN-272959
Fixed an issue where the firewall generated BGP update packets larger than 1500 bytes when the interface MTU was 1500 bytes and jumbo frames were enabled globally.
PAN-272395
Fixed an issue where informational logs caused the distributord process log file to be frequently overwritten.
PAN-272175
Fixed an issue where session rematch caused ACE cloud application traffic to match the wrong policy.
PAN-271425
Firewalls in active/active HA configurations only
Fixed an issue with SSL inbound decryption on firewalls on a vwire setup with asymmetric routing.
To use this fix, enter the CLI command set system setting ssl-decrypt ha-vwire-mac-learn global ye s on both firewalls in an HA pair.
PAN-271184
Fixed an issue where Device Telemetry failed due to an issue with the encoding of characters in the log file path.
PAN-269956
Fixed an issue where the all_pktproc process stopped responding, which caused internal path monitor failures.
PAN-269677
Fixed an issue where Panorama did not check for a NULL pointer when querying logs, which caused logs to not display on the web interface.
PAN-269291
Fixed an issue where the scheduled report generation script did not return debug information.
PAN-269106
Fixed an issue where the wifclient stopped responding during server certificate verification for MICA gRPC connections and caused the dataplane to restart when using a cloud-based ML detection engine (MICA). On certain platforms, this caused the firewall to reboot periodically.
PAN-269052
Fixed an issue where traffic was blocked by a URL filtering profile even though the Security policy rule did not have a URL filtering profile configured.
PAN-269027
Fixed an issue related to external dynamic lists that caused commit times on the firewall to be higher than expected.
PAN-268951
Fixed a CPS counter query issue that caused SNMP polling timeouts on the firewall.
PAN-268118
Fixed an issue on firewalls in active/passive HA configurations where, after a failover, irrelevant routing FIB entries were seen in the routing table on the newly active firewall.
PAN-267707
Fixed an issue where BFD sessions did not come up even when BGP peering was established.
PAN-267097
Fixed an issue where the replay database size increased significantly due to local and special configurations not being purged after commits.
PAN-266900
Fixed an issue on the Panorama web interface where you were unable to click OK after selecting an install package type and file from the dropdown and selecting a firewall.
PAN-265791
Fixed an issue where the all_task process stopped responding, which caused the dataplane to go down.
PAN-265646
Fixed an issue where the config lock icon was not visible for a custom role-based admin when a Superuser admin had acquired the config lock.
PAN-264708
Fixed an issue where a selective push was blocked when a configuration load was done.
PAN-264678
Fixed an issue where Preview Changes did not display configuration changes in Commit and push > Push Scope.
PAN-264169
PA-5400 Series firewalls only
Fixed an issue where the firewall sent correlated event logs to the syslog server using the management interface instead of the log interface.
PAN-263654
Fixed an issue where multiple DNS responses with different CNAME values caused evasion false positive alerts.
PAN-263559
Fixed an issue where the dataplane stopped responding and the firewall unexpectedly rebooted due to multiple process restarts.
PAN-262729
Panorama appliances only
Fixed an issue where the configd process experienced continuous high CPU utilization and repeatedly restarted.
PAN-262540
Fixed an issue where application traffic transactions that reused TCP ports did not work with decryption.
PAN-262383
Fixed an issue where the firewall was unable to decompress the HTTP2 header, which caused the session to be classified as unknown-tcp instead of web-browsing.
PAN-260300
PA-5410, PA-5420, PA-5430, PA-5440 and PA-5445 firewalls only
Fixed an issue related to the all_pktproc process where DPC slot 3 stopped responding.
PAN-260131
Fixed an issue where Wildfire content installation failed for WF-500B clusters when deployed from Panorama using the deployment schedule.
PAN-260015
Fixed an issue on the firewall where the dataplane restarted due to insufficient allocation of memory buffers.
PAN-254577
Fixed an issue where a core file was created on the Log Forwarding Card due to a third-party software issue.
PAN-249581
Fixed an issue where stale BGP routes were advertised to peers even when they were not present in the local RIB table.
PAN-249011
Fixed an issue where the firewall became unresponsive when committing a configuration change with a large number of uncommitted changes in the replay database.
PAN-241772
Fixed an issue where, when TLSv1.3 was used, an incorrect error message invalid padding was displayed instead of the expected error message Invalid server certificate.
PAN-241126
Fixed an issue where the client IP address was incorrect in the authentication logs for Captive Portal authentication events when the client used IPv6.
PAN-238594
Fixed an issue where the firewall rebooted when a QSFP28 cable was removed from the port while the port was passing traffic.
PAN-237010
Fixed an issue on Panorama where local commits took longer than expected after an upgrade.
PAN-233868
Fixed an issue where the firewall took an incorrect action for overlapping custom and edl-url-categories in a policy rule.
PAN-233581
Fixed an issue on firewalls in active/active HA configurations where SYN+ACK packets of asymmetric TCP sessions were dropped because of a session synchronization issue.
PAN-224833
Fixed an issue where the firewall dropped DHCPv6 relay packets if there were duplicate link-local addresses on different sub-interfaces.
PAN-212735
Fixed an issue where sessions that were previously in sw-cut-through mode (software fast forwarding) and persisted after an HA failover were no longer subject to software fast forwarding, which led to increased dataplane CPU load after HA failover.