
16 • PAN-OS 6.1 Release Notes Palo Alto Networks
Known Issues PAN-OS 6.1 Release Information
Known Issues
The following list describes known issues in the PAN-OS 6.1.0 release:
For recent updates to known issues for a given PAN-OS release, refer to
https://live.paloaltonetworks.com/docs/DOC-1982.
Issue Identifier Issue Description
74180
On PA-7050 firewalls in a high availability (HA) configuration, a TCP connection cannot be
established when a virtual wire subinterface with VLAN tags and IP classifiers is configured.
72922
In a high availability (HA) active/active configuration with an IPSec tunnel configured to
terminate on a floating IP address, if a session is owned by the device that does not own the
floating IP address, traffic might be dropped.
72715
This issue is now resolved.
See the list of PAN-OS
6.1.4 Addressed Issues
.
An M-100 appliance in Panorama™ mode running PAN-OS 6.1.2 or PAN-OS 6.1.3 might
be unable to receive logs forwarded by a managed firewall.
Workaround: check that all managed firewalls are assigned to a Log Collector (
Panorama >
Collector Groups > Device Log Forwarding
). Assign a Log Collector to any managed
firewalls that do not have a log forwarding preference configured.
71609
This issue is now resolved.
See the list of PAN-OS
6.1.4 Addressed Issues
.
Special characters are not supported in the local portion of an email address (the text in
front of @) for email addresses specified in email server profiles (
Device > Server Profiles
> Email
).
If you downgrade to a release earlier than 6.1.4, you should expect the following commit
errors if there are special characters in the local portion of any email address in your email
server profiles in PAN-OS 6.1.4 and later releases:
• Pushing email addresses with special characters from PAN-OS 6.1.4 or higher releases to
devices running PAN-OS 6.1.3 or earlier releases will fail.
• Subsequent auto-commit events after the initial auto-commit initiated during the
downgrade process to a PAN-OS 6.1.3 or earlier release will fail if email addresses in
email server profiles contain special characters.
70222
If the password for the administrator’s account on the NSX Manager contains special
charact
ers, such as “$”, Panorama cannot communicate with the NSX Manager. The
inability to communicate prevents context-based information, such as Dynamic
Address Groups, from being available to Panorama.
Workaround: remove special characters from the password on the NSX Manager.
69725
A log collector running a PAN-OS 6.0.X release does not correctly receive NTP server
configuration settings when they are pushed from Panorama running PAN-OS 6.1.0. When
both the log collector and Panorama are running PAN-OS 6.1.0, NTP server configuration
settings can be successfully pushed from Panorama to the log collector.
69598
Auto-commits can fail following an upgrade to PAN-OS 6.1.0 if Aggregate Ethernet (AE)
interfaces have been previously configured without defining an interface type (this can only
be done using the CLI; the web interface requires for the interface type to be defined).
Before upgrading to PAN-OS 6.1.0, ensure that all AE interfaces are configured as a certain
type of interface: HA, Layer 2, Layer 3, or virtual-wire.
Komentarze do niniejszej Instrukcji