Fixed an issue where

ifType

and

ifSpeed

were not populated in asynchronous mode of SNMP operations.

Fixed an issue where the management interface and front panel port interface statistics were not populated in asynchronous mode of SNMP operations.

(

PA-3400 Series firewalls only

) Fixed an issue where the firewall entered maintenance mode after enabling kernel data collection during the silent reboot.

Fixed an issue where, when using serial number and IP address authentication, and multiple gateways were configured, the portal returned the last gateway in the list and disregarded the satellite assignment by serial number.

(

VM-Series firewalls on Microsoft Azure environments only

) Fixed an issue where you were unable to log in to the firewall after a private data reset.

Fixed an issue where SNMP failed to respond to multiple Object Identifier (OID) queries in a single SNMP GET request.

Fixed an issue where enabling inline Cloud Analysis features caused a slow packet buffer leak, which resulted in performance issues and dropped traffic.

Added CPLD enhancement to capture external power issues.

Fixed an issue on the web interface where the

Virtual Router

and

Virtual System

configurations for the template incorrectly showed as

none

.

Fixed an issue where MLC2 verdict retrieval failed due to a regression in loopback data flag handling.

Fixed an issue where the

AND

operation under a Dynamic Address Group comparison did not work after upgrading the AWS plugin to 3.0.1.

Fixed an issue where the GlobalProtect SSL VPN tunnel immediately disconnected due to a keep-alive timeout.

Fixed an issue with unbalanced NAT session distribution with multidataplane firewalls when persistent-dipp was enabled.

Fixed an issue where firewalls failed to fetch content updates from the WildFire private cloud due to an

Unsupported protocol

error.

Fixed an issue on Panorama appliances in active/passive HA configurations where the firewalls entered an HA out-of-sync status and jobs failed on the passive appliance with the error message

Could not merged running config from file

.

Fixed an issue with the syn-cookie option where traffic unexpectedly stopped during packet exchange.

Fixed an issue where the managed collectors health status on Panorama displayed as empty.

(

VM-Series firewalls in Microsoft Azure environments only

) Fixed an issue where file descriptors were not closed due to invalid configurations.

Fixed an issue where ports did not go down when moving from an active state to a suspended state.

Fixed an issue where changes committed on Panorama were not reflected on the firewall after a successful push.

(

PA-5200 Series only

) Fixed an issue where the firewall did not boot up after a factory reset, and, with FIPS mode enabled, the firewall rebooted into maintenance mode.

Fixed an issue where FIB repush did not work with Advanced Routing enabled.

Fixed an issue where the web interface did not display newly added antispyware signatures or Vulnerability signatures.

Fixed an issue where the verdict for www.googleapis.com displayed the message

not-resolved

.

Fixed an issue where a higher byte count (s2c) was observed for DNS-Base application.

Fixed an issue where the SNMP get request status value for Panorama connections was incorrect.

Fixed an issue on firewalls in HA configurations where VXLAN sessions were allocated, but not installed or freed, which resulted in a constant high session table usage that was not synced between the firewalls. This resulted in a session count mismatch.

Fixed a kernel panic caused by a third-party issue

Fixed an issue where Authentication Portal redirection for HTTPS websites did not work when

Enhanced Handling of SSL/TLS Handshakes for Decrypted Traffic

was enabled.

Fixed an issue with the web interface where the

Dashboard

and a

Device Group

policy rule took longer than expected to load.

Fixed an issue where authentication failed on web-based GlobalProtect portal.

Fixed an issue where the NSSA default route from the firewall was not generated to advertise even though the backbone area default route was advertised during a graceful restart.

Fixed an issue where DNS resolution was delayed when an antispyware policy rule was applied to both client to firewall and firewall to internal DNS server legs of a connection.

Fixed an issue where, when the physical interface went down, the SD-WAN Ethernet connection state still showed

UP/path-monitor

due to the Active URL SaaS monitor connection state remaining UP/path-monitor.

Fixed an issue where a NetFlow export truncated the source username.

Fixed an issue where SSL traffic was impacted when

SSL Command and Control detector

for Incline Cloud Analysis was set to

reset-both

,

reset-client

,

reset-server

, or

drop

.

Fixed an issue on the Panorama web interface where users who were logged in through multiple sessions were able to see an active lock on only one session.

Fixed an issue on the web interface where the screen was blank after logging in to Panorama.

Fixed an issue where the masterd process was unable to start or stop the sysd process.

Fixed an issue on the firewall where SNMP incorrectly reported high packet descriptor usage.

Fixed an issue on Panorama where the reportd process unexpectedly stopped responding.

Fixed an issue where heartbeats to the brdagent process were lost, resulting in the process not responding, which caused the firewall to reboot.

Fixed an issue where the following error message was seen frequently in the system logs:

Clearing snmpd.log due to log overflow

.

(

Panorama appliances in Log Collector mode only

) Fixed an issue where Panorama stopped processing and saving logs.

Fixed an issue on Panorama where

Commit and Push

or

Push to Devices

operations failed when an external dynamic list was configured to check for updates every 5 minutes due to the commit and external dynamic fetch processes overlapping.