PAN-OS 10.2.10-h17 Addressed Issues

Fixed an issue where a device group import resulted in a Security policy rule being created with Application set to none.

Fixed an issue where the firewall stopped responding when a DNS client closed or reset a TCP connection while the firewall was sending a response.

Fixed an issue where GlobalProtect users experienced DNS resolution timeouts when using Prisma Access.

Fixed an issue where the devsrvr process restarted after a failed commit due to an invalid memory access.

Fixed an issue where restarting the firewall did not initiate an autocommit job, which caused the firewall to stop responding and the HA interface to go down.

Fixed an issue where informational logs caused the distributord process log file to be frequently overwritten.

(PA-5450 firewalls only) Fixed an issue where the DPC on slot 3 intermittently stopped responding due an all_pktproc restart.

A fix was made to address CVE-2025-0116.

Fixed an issue where Device Telemetry failed due to an issue with the encoding of characters in the log file path.

Fixed an issue where Panorama did not check for a NULL pointer when querying logs, which caused logs to not display on the web interface.

Fixed an issue where the wifclient stopped responding during server certificate verification for MICA gRPC connections and caused the dataplane to restart when using a cloud-based ML detection engine (MICA). On certain platforms, this caused the firewall to reboot periodically.

Fixed an issue where Monitor > Log Display did not display all logs when you applied a filter.

Fixed an issue where the replay database size increased significantly due to local and special configurations not being purged after commits.

Fixed an issue on Panorama where a cyclic nested address group configuration caused the configd process to stop responding after a commit.

Fixed an issue on the firewall where, when a high number of SD-WAN branch sites or interfaces were not connected, SD-WAN processes and tund processes stopped responding due to a high probing rate.

Fixed an issue where the firewall stopped responding due to a tund process or SD-WAN process restart.

(PA-7080 appliances with LPCs only) Fixed an issue where syslog forwarding over TCP stopped after upgrading.

Fixed an issue where a selective push was blocked when a configuration load was done.

Fixed an issue where Preview Changes did not display configuration changes in Commit and pushPush Scope.

Fixed an issue where commits from Panorama to Panorama virtual appliances failed with the error message Internal error during commit processing. Commit/Validate failed after upgrading Panorama.

(PA-5400f Series firewalls only) Fixed an intermittent issue where the all_task process stopped responding, which caused the firewall to restart.

Fixed an issue where application traffic transactions that reused TCP ports did not work with decryption.

(VM-Series firewalls on Microsoft Azure environments only) Fixed an issue where, when Accelerated Networking was enabled, traffic was dropped because of the flow_parse_ip_hdr counter related to an Nvidia driver issue.

Fixed an issue where BGP Aggregate Advertise filters did not work as expected when the summary option was enabled, and only summarized routes were advertised.

A fix was made to address CVE-2024-3393.

(PA-5450 firewalls only) Fixed an issue where Networking Cards (NC) experienced an internal link fault which caused path monitoring failure on the Dataplane Processing Card (DPC).

(VM-Series firewalls in HA configurations only) Fixed an issue where BGP routes from the active firewall were lost when the passive firewall was rebooted.

Fixed an issue where device telemetry log collection filled the root partition.

(PA-7050 firewalls only) Fixed an issue where the Network Processing Card (NPC), Data Processing Card (DPC), and Log forwarding Card (LFC) remained in a starting state after an unexpected power cycle.

Fixed an issue where the firewall required a restart when an SD-WAN policy rule was pushed from Panorama.

Fixed an issue where not all syslog logs were displayed in MonitorMonitorSystem when FIPS mode was enabled.

Fixed an issue where the firewall stopped responding due to a high number of SD-WAN probes being sent.

Fixed an issue where you were unable to select device groups in the push scope for user accounts.

Fixed an issue on Panorama where configuration locks were observed during a partial rulebase commit.

Fixed an issue where the firewall became unresponsive when committing a configuration change with a large number of uncommitted changes in the replay database.

Fixed an issue where the using QoS caused packet buffer utilization to increase exponentially and the PKI POOL DFLT pool depleted until a reboot was performed.

Fixed an issue where a high number of packets caused high packet descriptors on the firewall when handling EtherIP traffic.

Fixed an issue where FTP control connections were lost after an HA failover event.

Added a CLI command to address an issue where system lock files blocked authentication.

Fixed an issue where the policy optimizer feature did not add entries back to the mongodb database after removing them during an upgrade or downgrade.