PAN-OS® 8.1.2 provides a new feature to scrub swap memory on FIPS-enabled firewalls and appliances.
New Certifications Feature
FIPS Scrub Option
If you need to decommission or send in a FIPS-enabled Palo Alto Networks firewall or appliance for repair, you can now scrub the swap memory to remove all cryptographic security parameter (CSP) information from the swap partition(s). Beginning with PAN-OS 8.1.2, you can add the scrub option to the shutdown or restart CLI command as follows:
> request [restart | shutdown] system with-swap-scrub [dod | nnsa]
After the scrub completes, a
Systemlog is generated that indicates the status of the scrub.
Certifications The following topics describe how to configure Palo Alto Networks® firewalls and appliances to support the Common Criteria and the Federal Information Processing Standard ...
Upgrade/Downgrade Considerations The following table lists the new features that have upgrade or downgrade impacts. Make sure you understand all potential changes before you upgrade ...
PAN-OS 8.1 provides new authentication features: Extensible Authentication Protocol (EAP) Support for RADIUS and Authentication Using Custom Certificates for WildFire™ and PAN-DB. ...
Features Introduced in TS Agent 8.1
New features introduced in the Terminal Services (TS) agent 8.1 release. ...
Features Introduced in User-ID Agent 8.1
Review the new feature introduced in the Windows User-ID™ agent 8.1 release. ...