Limitations in PAN-OS 11.2
Focus
Focus

Limitations in PAN-OS 11.2

Table of Contents

Limitations in PAN-OS 11.2

What are the limitations related to PAN-OS 11.2 releases?
The following are limitations associated with PAN-OS 11.2.
Issue ID
Description
PAN-265738
NAT is not configurable when HA clusters are configured. HA clusters do not support NAT.
PAN-254305
Using the dataplane interface as the service route for gp-ip-mgmt is not supported in 11.2.0. Use the management interface as the service route in 11.2.0.
PAN-247728
In 11.2.0, when Advanced Routing is enabled, IP multicast is not supported. An upcoming version will provide support for this feature. Customers who have multicast configured or who plan to deploy multicast routing should not upgrade to 11.2.0. Additionally, when Advanced Routing is enabled, the BGP dampening configuration isn't applied to any peers or peer group; the configuration is preserved but has no effect on BGP. Customers can use BGP even if they have applied a Dampening profile to a specific set of peers. The issue doesn't affect any other BGP features.
PAN-246825
ECMP is not supported for equal-cost routes where one or more of those routes has a virtual router or logical router as the next hop. None of the equal-cost routes will be installed in the Forwarding Information Base (FIB).
PAN-240517
Enter any random username and password (or just press enter) in the pop-up dialog on the satellite to retrigger the authentication process in the following cases:
  • A scenario where the portal is running PAN-OS 11.2.0 and the satellite is running version earlier to 11.2.0, and the satellite cookie has expired. In this case, when you attempt to enable the serial number and IP address authentication method without adding the satellite IP address in the IP allow list on the portal, satellite authentication fails. The failure is due to a missing IP address in the IP allow list.
  • A scenario where the portal is running PAN-OS 11.2.0 and the satellite is running version that does not support serial number and IP address authentication method, if the satellite cookie expires before enabling the serial number and IP address authentication method on the portal, satellite authentication will fail due to satellite cookie expiration.