BugZero | Palo Alto Networks BugID PAN-135089 - Fixed an issue where the CPU for a process ( ikemg...

OPERATIONAL DEFECT DATABASE

...

BugZero | Palo Alto Networks BugID PAN-135089 - Fixed an issue where the CPU for a process ( ikemg...

Palo Alto Networks - Defect ID: PAN-135089

Fixed an issue where the CPU for a process ( ikemgr ) spiked when third-party VPN clients connected to the GlobalProtect gateway with more than three DNS servers configured.

Palo Alto Networks - Defect ID: PAN-135089

Fixed an issue where the CPU for a process ( ikemgr ) spiked when third-party VPN clients connected to the GlobalProtect gateway with more than three DNS servers configured.

Last updated on Invalid date

BugZero Risk Score
6.3 Medium

Overall: 6.3

Severity: 6.4

Community: 3.7

Lifecycle: 10.0

What is the BugZero Risk Score?

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Description

The earliest recollection of this bug is traced back to PAN-OS 9.1.2 - July 22, 2025. This bug is fixed in PAN-OS versions 9.1.2. Fixed an issue where the CPU for a process ( ikemgr ) spiked when third-party VPN clients connected to the GlobalProtect gateway with more than three DNS servers configured. For more information: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes/pan-os-9-1-addressed-issues/pan-os-9-1-2-addressed-issues

Change history

No changes to display

Top Palo Alto Networks Defects

6.3Defect ID: PAN-294179
On the page, some commit versions might display incorrect or missing data. Fields such as, , , and might not be visible for some commit versions. Sometimes, commit versions can disappear after a refresh and the commit description field might display corrupted characters.
6.3Defect ID: PAN-292228
Fixed an issue where, after configuring dual stack GlobalProtect with both IPv4 and IPv6 address pools, IPv6 return traffic was dropped with the error message flow-basic error; packet dropped, tunnel resolution failure .
6.3Defect ID: PAN-285436
Fixed an issue where a selective push from Panorama caused the firewall Security policy rules to be removed on firewalls associated with the device group. This occurred when the base configuration version chosen for the selective push preceded the device configuration import operation, which caused the imported configuration to not be included in the pushed configuration.
6.3Defect ID: PAN-293842
Fixed an issue where the hybrid-SWG service proxy stopped working after upgrading to PAN-OS 11.1.6-h13 due to the firewall failing to establish the listening interface.
6.3Defect ID: PAN-293511
Fixed an issue where renaming a BGP filtering profile in Panorama does not update the corresponding BGP peer group in the virtual router, leading to commit failures.

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Ready to prevent the next vendor outage?

Get a demo

OPERATIONAL DEFECT DATABASE

Palo Alto Networks - Defect ID: PAN-135089

Fixed an issue where the CPU for a process ( ikemgr ) spiked when third-party VPN clients connected to the GlobalProtect gateway with more than three DNS servers configured.

Palo Alto Networks - Defect ID: PAN-135089

Fixed an issue where the CPU for a process ( ikemgr ) spiked when third-party VPN clients connected to the GlobalProtect gateway with more than three DNS servers configured.

Last updated on Invalid date

BugZero Risk Score6.3 Medium

Bug Details

Links

Top Palo Alto Networks Defects

Ready to prevent the next vendor outage?

BugZero Risk Score
6.3 Medium