PAN-OS 9.0.8 Addressed Issues
Table of Contents
Expand All
|
Collapse All
Next-Generation Firewall Docs
-
-
- Cloud Management of NGFWs
- PAN-OS 10.0 (EoL)
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1 & Later
- PAN-OS 9.1 (EoL)
-
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1 & Later
-
-
-
- Cloud Management and AIOps for NGFW
- PAN-OS 10.0 (EoL)
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1
- PAN-OS 11.2
- PAN-OS 8.1 (EoL)
- PAN-OS 9.0 (EoL)
- PAN-OS 9.1 (EoL)
End-of-Life (EoL)
PAN-OS 9.0.8 Addressed Issues
PAN-OS® 9.0.8 addressed issues.
Issue ID | Description |
---|---|
PAN-140509 | Fixed an issue where performing private
data resets during custom Amazon Machine Image (AMI) creation removed
CloudWatch directories and caused the CloudWatch plugin to fail. |
PAN-140270 | Added additional debugging to periodically
collect the debug dataplane internal pdt bcm counters graphical CLI
command's output in the Tech Support File (TSF). |
PAN-140043 | (PA-7050 firewalls running on PA-7000
100G NPCs only) Fixed an issue where the PA-7000 100G NPC Native
Implemented Function (NIF) initialization took longer than expected,
which caused internal path monitoring failure and sent the firewall
into a non-functional state while rebooting. |
PAN-139555 | Fixed an issue where after upgrading the
passive firewall, the outer UDP sessions synced from the active
firewall did not retain the rule information and after failover,
GPRS tunneling protocol (GTP) inspection did not work. |
PAN-137673 | Fixed an issue where a memory leak associated
with a process (devsrvr) caused an out-of-memory (OOM)
condition on the firewall. |
PAN-136765 | Fixed an issue where an FQDN update that
resolved to the same IP address of another FQDN across different
policies caused the other FQDN to be deleted due to missing FQDN
aggregation. |
PAN-136612 | Fixed an issue where fragmented packets
leaked, which caused the depletion of Work Query Entry (WQE) pools. |
PAN-136470 | Fixed an issue where a process (all_pktproc) restarted
while processing packets with 0.0.0.0 and destination protocol 251
that internally mapped to GTP-C traffic, which caused the dataplane to
restart. |
PAN-136173 | Fixed an issue where dataplane interfaces
remained down after active firewall bootup or a high availability
(HA) failover. |
PAN-135909 | Fixed an issue where connections to the
web interface were abruptly interrupted due to a double free condition (gPanUiPhpGlobal_secure_config_reset),
which led to unexpected process restarts. |
PAN-134571 | Fixed an issue where DNS security incorrectly
set bits to zero on compressed DNS packets, which caused DNS malformation. |
PAN-134547 | Fixed an issue where the passive firewall
in an active/passive HA configuration deleted BGP-learned routes
synchronized from the active firewall if the BGP configuration included
the redistribution of the learned routes. |
PAN-134546 | Fixed a rare issue on the firewall where
a process (flow_mgmt) restarted due to an invalid packet received
through the GlobalProtect agent or clientless VPN. |
PAN-134431 | Fixed an issue with Security Assertion Markup
Language (SAML) authentication where the firewall used old authd_id values,
which resulted in failed authentication. |
PAN-133289 | Fixed an issue where improper parsing of
the URL database caused high device-server CPU usage. |
PAN-132898 | Fixed an intermittent issue where logs were
missing with log_index debug messages
due to merging of the index. |
PAN-132651 | Fixed an issue where packet buffer use was
at 99% and tunnel monitoring failed, which caused tunnel flaps and
LDAP authentication failures. |
PAN-131922 | Fixed an issue where the certificate was
not automatically pushed to the firewall until you manually fetched
the certificate from the firewall. |
PAN-131517 | Fixed an issue with a memory corruption
error that caused a process (all_pktproc) to restart. |
PAN-130750 | Fixed an issue where commit failed on the
firewall after disabling Pre-Defined Reports from
Panorama. |
PAN-129328 | Fixed an issue where packet descriptor (on-chip)
usage reached 100% even though buffers, throughput, and session
counts were not elevated. |
PAN-129289 | Fixed an issue where export failed for a
large running-config.xml file using the XML API. |
PAN-128568 | Fixed a rare issue on the firewalls where
a process (pan_task) restarted due to NULL pointer exception. |
PAN-128330 | Fixed an issue where the response for the
XML API call for the show object registered-ip all operational
CLI command included extra appended content. |
PAN-128195 | Fixed an issue on Panorama where processes (vld)
ran on high CPU when the incoming system log rate was 0. |
PAN-127614 | Fixed an issue where SNMPv3 monitoring of
the firewall failed from the Zabbix server after a firewall reboot
or SNMP daemon restart on the firewall. |
PAN-127358 | Fixed an issue with a memory leak in a process (configd)
where virtual memory exceeded the limit, which caused the process
to restart. |
PAN-127318 | Fixed an issue where the firewall intermittently
dropped DNS A or AAAA queries received over IPSec tunnels due to
a session installation failure. |
PAN-127004 | Fixed an issue where a process (sysd)
restarted due to missing heartbeats. |
PAN-126205 | Fixed an issue where role-based administrators
were unable to import certificate private keys onto firewalls. |
PAN-126069 | Fixed an issue in Panorama where logs couldn't
be viewed when an additional log collector was configured in the
existing log collector group. |
PAN-125934 | Fixed an issue on Panorama where a commit
failed when bootstrapping a firewall to a configuration with a serial
number of "unknown." The commit failed with the following error
message: mgt-config -> devices -> unknown unknown is invalid. |
PAN-125794 | Fixed an issue where a role-based administrator
with CLI access was not able to successfully execute the commit-partial CLI
command to commit only changes made by themselves. |
PAN-125730 | Fixed an issue where packets tagged with
IP protocol 252 were incorrectly treated as GPRS tunneling protocol
(GTP) traffic, which caused the packet processor to terminate. |
PAN-125534 | (PA-5200 Series and PA-7000 Series firewalls
only) Fixed an issue where firewalls experienced high packet
descriptor (on-chip) usage during uploads to the WildFire Cloud
or WF-500 appliance. |
PAN-125410 | Fixed an issue where a new GPRS tunneling
protocol version 2 control plane (GTPv2-C) session reused GTP-C
tunnel parameters within two seconds after deleting the old GTP-C
session, which caused a session conflict on the firewall. |
PAN-124893 | Fixed an issue where a race condition caused
the FIB entry list to form a circle, which in turn caused a process
(mprelay) to infinitely loop. |
PAN-124039 | A fix was made to address an issue where
the GlobalProtect Portal feature in PAN-OS did not set a new session
identifier after a successful user login (CVE-2020-1993). |
PAN-123637 | (PA-3200 Series firewalls only)
Fixed an issue where configuring 1G small form-factor pluggable
(SFP) ports on a firewall with forced speed mode (of 1G) enabled
made the link unusable when forced speed mode (of 1G) was also enabled
on the peer firewall. |
PAN-122408 | (PA-7000b Series firewalls with LFC
cards only) Fixed an issue where the system logs would continuously
report a failure to connect to the proxy for WildFire even when
the connectivity was working properly. |
PAN-119806 | Fixed an issue in an HA configuration where
the dataplane restarted due to internal packet path monitoring failure
on the passive firewall. |
PAN-116480 | Fixed an issue in Panorama where the show system search-engine-quota CLI
command, the show log-collector serial-number <log-collector_SN> CLI
command, and Statistics (Panorama
> Managed Collectors > Statistics) showed incorrect
log retention data. |
PAN-111611 | Fixed an issue where the connection between
the firewall and Cortex Data Lake flapped if connections decreased. |
PAN-88136 | Fixed a rare issue where a URL update caused
the dataplane to restart. |