| PAN-332090 | In a multi-vsys setup, you cannot create an L2-switch type
sub-interface using a VLAN object from the VLAN table. The VLAN object
is not accepted when configuring the sub-interface. |
| PAN-328974 | In PAN-OS 12.2.2, when you configure ML7-CUID in a multi-vsys
environment, all vsys must use the same contributing segment ID. PAN-OS
does not display a commit error or warning if you configure different
contributing segment IDs across vsys, which can result in inconsistent
behavior.Ensure that all vsys are configured with the same contributing
segment ID before committing. |
| — | When PAN-OS Shield is enabled, traffic and threat logs generated by
the internal vsys security policy are not forwarded to Panorama, a log
collector, or Strata Logging Service. Only traffic logs from the
user-facing policy are forwarded. Logs from the internal PAN-OS Shield
policy remain visible locally on the firewall but are not
exported. |
