List of Upcoming Resolved Issues in R82 Jumbo Hotfix Accumulator
The below issues are planned to be addressed in our future Jumbo Hotfix Accumulator Takes.
The list is not final and may change.
|
ID |
Product |
Description |
|---|---|---|
|
PRJ-59091, |
Security Management |
Administrators with LSM write permissions cannot delete LSM Gateway objects without also having write permissions for Others/Common Objects. |
|
PRJ-62532, |
Security Management |
Import of a large policy package fails with validation and API errors on the Multi-Domain Security Management Server. Refer to sk183697. |
|
PRJ-64885, PRHF-42660 |
Security Management |
In rare scenarios, login using Management API fails with a timeout and the "api status" command returns "API readiness test failed" message. Refer to sk184342. |
|
PRJ-60489, |
Security Management |
In some scenarios, when Configuration Sharing is enabled, audit logs may show failed login attempts to the CPM Server after publishing changes. |
|
PRJ-61809, |
Security Management |
When a user with read-only permissions for Global Domains (for example, a user with the Global Manager profile) connects to the System Domain in SmartConsole, the SmartConsole status bar incorrectly displays the user as having read-write permissions. |
|
PRJ-59516, |
Security Management |
In rare scenarios, after an IPS update, all protections are set to Staging mode in Threat Profiles configured with "Set activation as Staging mode". |
|
PRJ-61328, |
Security Management |
In rare scenarios, IPS update fails because of duplicate objects. |
|
PRJ-59751, |
Security Management |
In some scenarios, creating a Standby Domain Security Management Server fails with "You do not have the permissions to complete this action". |
|
PRJ-62555, PRHF-40800 |
Security Management |
In SmartConsole, if the Task pane has no tasks to show, the Task pane incorrectly shows an "Error retrieving results" message. |
|
PRJ-62551, PMTR-117467 |
Security Management |
In rare scenarios, the Security Management Server fails to start after performing a "Revert to Revision" operation. |
|
PRJ-60527, PRHF-38743 |
Security Management |
When running the "mgmt_cli -r true gaia-api/set-ntp target pocsms enabled true --format json" Management API command, the output is not the same as running it directly from Gaia API. |
|
PRJ-62195, PMTR-116551 |
Security Management |
When using the "set-threat-protection" Management API command, overriding either the packet-capture or track values also overrides the action field and sets it to "inactive". |
|
PRJ-63793, PRHF-41803 |
Multi-Domain Security Management |
On Multi-Domain Security Management Servers, custom Compliance Blade Best Practices may differ between the Multi-Domain Security Management level and the Domain level. |
|
PRJ-56359, PRHF-34777 |
CPView |
CPView may display incorrect concurrent connection statistics (negative values) because of improper aggregation of connection data during a Cluster failover. |
|
PRJ-55405, |
Logging |
In rare scenarios, the description of IPS Logs in the Logs view may be unclear. Refer to sk182386. |
|
PRJ-62132, PRHF-40631 |
Security Gateway |
The FWK memory leak may occur during FTP connections with high file volume. Refer to sk183662. |
|
PRJ-64397, |
Security Gateway |
When changing the CoreXL configuration (for example, adjusting the number of SND and FW instances), a network interface may unexpectedly go down. This can cause traffic disruption. |
|
PRJ-59735, |
Security Gateway |
In some scenarios, when SecureXL is working in User Mode (UPPAK) mode, QoS service is unable to start, displaying the "QoS is not responding. Verify that QoS is installed on the gateway" error. Refer to sk183752. |
|
PRJ-62920, |
Security Gateway |
Infinite routing loop may occur because of TTL handling in SecureXL Medium Path. Refer to sk183728. |
|
PRJ-63942, |
Security Gateway |
In a Quantum Maestro VSX environment, Layer 2 MAC address table in Bridge Mode (Bridge Forwarding Database) entries may be incorrectly deleted, causing connectivity issues. |
|
PRJ-57811, TEMTA-1237 |
Threat Prevention |
In some scenarios, Mail Transfer Agent (MTA) file type classification may be inaccurate when both MTA and Threat Emulation are enabled. |
|
PRJ-62837, |
Mobile Access |
Mobile Access Software Blade may incorrectly terminate Guacamole-based clientless RDP/SSH sessions due to client idleness. |
|
PRJ-60482, PMTR-110991 |
Mobile Access |
Mobile Access SSL Network Extender (SNX) remote users with Windows 11 24H2 fail to connect. Refer to sk182923. |
|
PRJ-62831, |
Mobile Access |
In rare scenarios, Mobile Access SmartConsole Logs may not match views/queries, including the "MAC address" or "Methods" field names. |
|
PRJ-58680, |
SecureXL |
Concurrent NAT64 and NAT46 operations may cause packet processing threads to become unresponsive because of improper issue handling in the SIM v6 kernel module. |
|
PRJ-64334, |
SecureXL |
Potential USIM process exit when using virtio devices and changing the MTU value. |
|
PRJ-64457, |
SecureXL |
Traffic may be disrupted when reconfiguring the virtual hardware interfaces. |
|
PRJ-61312, |
SecureXL |
In some scenarios, the VSX Security Gateway may not route traffic correctly for non-accelerated connections and accelerated connections that require Active or Passive Streaming when SecureXL User Mode (UPPAK) is enabled. |
|
PRJ-61616, |
SecureXL |
The USIM process may exit when multiple routes are using the same nexthop and the nexthop is not yet resolved |
|
PRJ-62960, |
SecureXL |
The USIM process may exit when viewing the fg_conn table using the "fwaccel tab -t" command. |
|
PRJ-57694, |
SecureXL |
Multiple "radix_get_value" messages may appear in fwk.elg log files. |
|
PRJ-64881, |
SecureXL |
When a VLAN interface is configured as the synchronization interface for the VSX cluster and SecureXL User Mode (UPPAK) is enabled, Virtual Systems on non-active members cannot forward traffic to Virtual Systems on the active member through a warp interface. |
|
PRJ-64613, |
SecureXL |
Multiple threads may be performing a routing next hop lookup for the same next hop at the same time, causing a rare race condition and USIM-related processes to exit. |
|
PRJ-61827, |
SecureXL |
Interface cards are not displayed in the output of the "show asset network" command when SecureXL User Mode (UPPAK) and MDPS are enabled. Refer to sk184218. |
|
PRJ-64143, PMTR-120092 |
SecureXL |
In a Maestro setup, the USIM process may exit under high load when handling encrypted VPN traffic with the other Security Gateway. |
|
PRJ-61623, PMTR-116027 |
SecureXL |
Rate Limiting policy installation (when the Rate Limiting policy is updated or country code data is updated) may take a long time. |
|
PRJ-59396, AAD-4359 |
VPN |
VPN traffic outage may occur in ClusterXL environments after a Cluster failover. |
|
PRJ-63020, |
VSX |
Services fail after Virtual System failover in Maestro dual-site environment using the Same Virtual MAC feature. Refer to sk183956 and sk184194. |
|
PRJ-62535, PRHF-40972 |
Gaia OS |
Gaia Portal Session Cookie missing the SameSite attribute. Security scanners and penetration tests flag the missing SameSite attribute as a vulnerability. Refer to sk183645. |
|
PRJ-63262, |
Gaia OS |
The LLDP Clish "lldpneighbors" command may have a corrupted output in case of extensive data. Refer to sk182065. |
|
PRJ-60766, |
Gaia OS |
DHCP traffic peaks may cause high utilization which may impact connectivity. |
|
PRJ-62041, |
Gaia OS |
The MONITORD process unexpectedly exits on Security Gateways. Refer to sk184076. |
|
PRJ-62466, |
Gaia OS |
SNMP Power Supply trap reports false "Down" status. Refer to sk183702. |
|
PRJ-59519, PMTR-111921 |
SD-WAN |
A Virtual System may lose connectivity on the Backup and the Standby member when route-based traffic is configured with specific SD-WAN configurations in VSX environments. |
|
PRJ-63462, |
Harmony Endpoint |
Full Disk Encryption user update password fails with auth_type 3 (certificate and password). |
|
PRJ-61893, |
Harmony Endpoint |
Posture Management scans initiated manually or automatically remain stuck at the "Scan initialize" status. This issue affects all devices with Endpoint Security installed. |
|
PRJ-63038, |
Harmony Endpoint |
After upgrading the Endpoint Security Client from a non-compliant version to E88.62 on Azure AD devices (protected by Full Disk Encryption), multiple clients may enter a disconnected state. |
|
PRJ-61896, |
Harmony Endpoint |
Security Management Server and Policy Server may lose connectivity after uploading production licenses. Running "cplic print -x" on the Policy Server shows no output, while the Security Management Server output is uploaded for review. |
|
PRJ-64062, |
Scalable Platforms |
When FastForward feature is enabled, policy installation may fail with "Maestro acceleration (MXL) failed, reason: General error. Please check /var/log/acl_cli.log on the security group SMO for more details" instead of indicating that it is a policy parser issue. |
|
PRJ-56452, |
Carrier Security |
SAM rules fail to gracefully terminate PDP context when the timer expires. |
|
PRJ-64504, |
Carrier Security |
Policy installation fails with an internal error when the Security Gateway policy includes rules that match a specific Access Point Name (APN) for GTPv0 or GTPv1 traffic. |
|
PRJ-64593, PMTR-121110 |
Scalable Platforms |
In rare scenarios, in a Maestro setup, traffic interruption may occur after Security Gateway reboots when the Gaia Database is corrupted. |
|
PRJ-62818, PRHF-41165 |
Scalable Platforms |
In Maestro VSX VSLS Cluster, after setting the kernel parameters "fwha_monitor_all_vlan=1" and "fwha_enable_if_probing=1", memory consumption may immediately increase to 100% and cause an outage. |
|
PRJ-63476, PMTR-119026 |
Scalable Platforms |
Installing policy to the Maestro Security Group under extreme load with Resource Separation may fail. |
|
PRJ-64632, PRHF-41710 |
Scalable Platforms |
The "Invalid property name for chassis" error is displayed when changing the "alert_threshold packet_rate_total_threshold_low_ratio" value. |
|
PRJ-56448, PRHF-31901 |
Carrier Security |
Running to "snmpwalk" or "stattest" command for any of GX OIDs results in the "No Such Instance currently exists at this OID" error. |