Disclaimer

Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 8.1.4-h2

The earliest recollection of this bug is traced back to PAN-OS 8.1 - July 22, 2025. This bug is fixed in PAN-OS versions 8.1.5. Fixed an issue where firewalls failed to establish IKE phase 1 or phase 2 when you specified Diffie-Hellman (DH) group1 . ( PAN-OS 8.1.4 only ) Firewalls fail to establish IKE phase 1 or phase 2 when you specify Diffie-Hellman (DH) group1 . Workaround: Specify a DH group other than group1 . For more information: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-release-notes/pan-os-8-1-addressed-issues/pan-os-8-1-5-addressed-issues https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-release-notes/pan-os-8-1-release-information/known-issues/known-issues-related-to-pan-os-8-1-releases