A selective push from Panorama to managed firewalls fail when plugin configurations reference certain Panorama settings, such as log-collector groups or access domains. Workaround: Perform a full push instead of a selective push as a temporary measure. Note that selective push attempts will continue to fail until you upgrade to the release that includes the fix.

( VM-Series firewalls only ) Fixed an issue where insufficient i-node space was available on the sysroot0 partition.

Fixed an issue where BGP peering sessions between a hub firewall and a satellite firewall over GlobalProtect LSVPN failed to connect.