PAN-OS 11.0.0 Addressed Issues

PAN-OS® 11.0.0 addressed issues.
Issue ID
Fixed an issue where Email schedules (
PDF Reports
Email Scheduler
) were not supported for SaaS Application Usage (
PDF Reports
SaaS Application Usage
) reports.
PA-7000 Series firewalls with 100G NPC (Network Processing Cards) only
) Fixed an issue where sudden, large bursts of traffic destined for an interface that was down caused packet buffers to fill, which stalled path monitor heartbeat packets.
Fixed an issue where the Device Telemetry configuration for a region was unable to be set or edited via the web interface.
Fixed an issue with firewalls in HA configurations where both firewalls responded with gARP messages after a switchover.
Fixed an issue where ACC reports did not work for custom RBAC users when more than 12 access domains were associated with the username.
PA-5450 firewalls only
) Fixed an issue where
was hardcoded to eth0 instead of bond0.
PA-5400 Series only
) Fixed an issue where swapping Network Processing Cards (NPCs) caused high root partition use.
Fixed an issue where using the
load config partial
CLI command to x-paths removed address object entries from address groups.
Fixed an issue where, after upgrading to PAN-OS 10.2 release, the firewall ran a RAID rebuild for the log disk after ever every reboot.
Fixed an issue on Panorama where, when you created multiple device group objects with the same name in the shared device group and any additional device groups (
Device Groups
) under the same device group hierarchy that were used in one or more policies, renaming the object with a shared name in any device group caused the object name to change in the policies that it was used in. This issue occurred with device group objects that were referenced in a Security policy rule.
Fixed an issue where IP address tag policy updates were delayed.
PA-7000 Series SMC-B firewalls only
) Fixed an issue where the firewall did not capture data when the active management interface was MGT-B.
Fixed an issue where the packet broker session timeout value did not match the master sessions timeout value after the firewall received a TCP FIN or RST packet. The fix ensures that Broker session times out within 1 second after the master session timed out.
PA-5410, PA-5420, PA-5430, and PA-5440 firewalls in HA configurations only
) Fixed an issue where HA1-A and HA1-B port information didn't match to front panel mappings.
Fixed an issue that caused a memory leak on the reportd process.
VM-Series firewalls only
) Fixed an issue where, on firewalls licensed with Software NGFW Credit (VM-FLEX-4 and higher), HA clustering was unable to be established.
Fixed an issue where, when NetBIOS format (domain\user) was used for the IP address-to-username mapping and the firewall received the group mapping information from the Cloud Identity Engine, the firewall did not match the user to the correct group.

Recommended For You