(PA-7500 Series, PA-5410, PA-5420, PA-5430, PA-5440, PA-5445, PA-3400 Series, PA-1400 Series, PA-400 Series, VM-Series, and CN-Series firewalls only) Fixed a race condition issue related to predict processing, which resulted in a dataplane restart and traffic loss.

Fixed an issue where, after upgrading, the firewall incorrectly calculated the UDP checksum for RTP traffic after NAT and Security policy application, which led to dropped packets and silent calls in applications.

Fixed an issue where the pan_task process stopped responding when the firewall attempted to forward files to the WildFire public cloud, which caused the dataplane to experience heartbeat failures.

Fixed an issue where the option to sort sequence numbers was missing from Filters prefix list in the advanced routing filters.

Fixed an issue where high memory consumption occurred on the logrcvr process.

Fixed an issue where the all_task process stopped responding, which caused the firewall to reboot unexpectedly, and traffic failures occurred.

(VM-Series firewalls on Amazon Web Services (AWS) GWLB environments only) Fixed an issue where the firewall CPU usage reached 100% after upgrading to PAN-OS 11.1.6-h1.

Fixed an issue where retrieving filenames from OneDrive resulted in a cache miss.

(PA-5220 firewalls only) Fixed an issue where custom reports were delayed when sent via email instead of being sent at the scheduled time.

Fixed an issue where, after an upgrade, the total number of logout records in the HIP database incorrectly displayed as zero.

Fixed an issue where, after an upgrade, the SNMP polled values for IF-MIB::ifInErrors displayed a high number of errors that did not match the values in the CLI show interface command.

Fixed an issue where a slow NAT leak occurred when persistent NAT was enabled. This occurred when ICMP sessions matched the persistent Dynamic IP and Port (DIPP) rule and no predict sessions were involved in that rule.

(PA-7050 Firewalls only) Fixed an issue where, after an upgrade, the dataplane CPU reached 100% due to packet buffer exhaustion, which resulted in general packet processing issues.

Fixed an issue where firewalls became unstable and stopped responding, which resulted in an OOM condition.

Fixed an issue where the web interface did not display a message to commit prior changes before attempting a partial configuration load.

Fixed an issue where the popup window did not appear as expected for Clientless VPN users.

(M-600 appliances only)) Fixed an issue where Panorama did not update all panreplay database entries after performing a commit and full push to all devices.

Fixed an issue where deleting the NTP server address caused a commit validation error. This occurred when the configuration included both primary and secondary NTP servers and the secondary server was removed.

Fixed an issue where the firewall skipped the DNS policy rule of a domain external dynamic list (EDL) during an EDL refresh.

To use this fix, run the following CLI command and commit: set deviceconfig setting ctd custom-edl-domains-continuous-reload yes/no

Fixed an issue where Advanced Services, App-ID Cloud Engine (ACE), and Enhanced Application Log stopped working due to incorrect memory usage accounting, which caused memory usage to remain at 99% after an extended period of time.

Fixed an issue where socket files created in the /tmp directory were not cleared.

Fixed an issue on the web interface where, when all rules were highlighted when a read-only admin user clicked the Highlight Unused Rules checkbox.

Fixed an issue where the Priority Code Point (PCP) bits in the VLAN header were not reset to 0 when a packet was received from one Layer 3 tagged interface and forwarded to another, which resulted in dropped packets.

To use this fix, run the CLI command set force-vlan-pcp-reset yes and reboot the firewall.

Fixed an issue where BFD sessions did not come up even when BGP peering was established.

Fixed an issue on Panorama where, after you enabled multihop in a BFD profile, you were unable to disable it via the web interface.

Fixed an issue where secondary IP addresses with a /32 prefix configured on Layer 3 interfaces were not reachable in FRR mode.

Fixed an issue on the firewall where the dataplane restarted due to insufficient allocation of memory buffers.

Fixed an issue where, when QoS was enabled on aggregate interfaces, the maximum aggregate interface throughput was capped, which limited network traffic. This occurred even with default QoS settings and no configured egress max-bandwidth.

(PA-5450 firewalls only) Fixed an issue where the class of service (CoS) priority bit was not modified, causing access points to lose connectivity to the wireless controller when traffic was routed through the firewall.

Fixed an issue where licenses expired a day before the expiry date.

Fixed an issue where you were unable to create duplicate entries in Advanced Routing AS path prepend in the BGP filter route map.

Fixed an issue where CIE validation checks on the firewall prevented configuration pushes from Panorama, which resulted in commit failures during new firewall deployment. This occurred when a template with an Authentication Profile with the Authentication Type as Cloud Authentication Service was pushed to a newly deployed firewall without internet access or without a device certificate.

(VM-Series firewalls only) Fixed an issue where the GlobalProtect client failed to install on the firewall.