
40 • PAN-OS 6.1 Release Notes Palo Alto Networks
PAN-OS 6.1.1 Addressed Issues
68320
The Logging and Reporting Settings section on the web interface incorrectly displayed
a logarithm for unallocated Log Storage when the total allocated log storage quota was
configured to be 100% and unallocated log storage was 0% (
Device > Setup >
Management
). This was a cosmetic issue and has been fixed so that Log Storage on
the
Logging and Reporting Settings window displays unallocated log storage as 0 MB
when log storage is 100 % allocated.
68319
When FIPS mode was enabled, the web interface becomes unresponsive when
configuring a GlobalProtect gateway and a browser refresh was required to continue
using the web interface. A check was introduced to ensure that the web interface does
not become unresponsive when creating a GlobalProtect gateway with FIPS mode
enabled.
68286
An issue was seen where setting up a password for a proxy server caused the
management plane to restart (
Device > Setup > Services > Proxy Server). This was
due to a backend process restarting when the password was configured and has been
fixed.
68100
An issue was resolved where the Strip X-Forwarded-For Header option did not
correctltly remove an internal IP address (
Device > Setup > Content-ID).
68055
Mac clients were incorrectly unable to access certain websites that Windows clients
were able to access. This issue occurred when fragmented traffic passed through the
firewall and the first fragment did not include the header; this caused packets to be
dropped. The issue has been resolved.
67864
When a rule pushed from Panorama is selected on a managed device, the Clone button
in a security policy is enabled; however, rules pushed to a managed device from
Panorama cannot be cloned on a managed device. With this fix, the
Clone button for
rules pushed from Panorama correctly shows as disabled on the web interface for a
managed device.
67810
When a PA-5000 Series device initiates sessions on different data planes in an
environment with multiple virtual systems, sometimes session traffic failed to span
across virtual systems. This issue has been resolved so that inter-virtual system sessions
succeed with a dynamic network address translation (NAT) policy configuration.
67676
Upgrading Panorama to a major release resulted in Panorama losing connectivity with
managed firewalls (a major release is any release where the release number ends in 0,
for example PAN-OS 6.0.0 or PAN-OS 6.1.0). This was due to an issue with the log
schema file and an update was made to ensure that the log schema file is overwritten
during an upgrade, even if the file size is zero.
67567
When a new version of the BrightCloud URL database was downloaded and installed,
if there was a change to the category for a URL between the old and the new database,
the change was not reflected on the dataplane. With this fix, URL categories on the
dataplane are updated correctly after installing a new version of the BrightCloud
database.
67516
Fixed an issue with a high availability (HA) active/active configuration where a physical
MAC address was returned for a floating IP address instead of a virtual MAC address.
This has been addressed so that the floating IP correctly responds to ARP requests
with a virtual MAC address.
Issue Identifier Issue Description
Comentários a estes Manuais