The earliest recollection of this bug is traced back to PAN-OS 11.0.4 - July 22, 2025. This bug is fixed in PAN-OS versions 11.0.4. Fixed an issue where SSL decryption for HTTP/2 sessions failed when enabling Send handshake messages to CTD for inspection ( Device > Setup > Session > Decryption Settings > SSL Decryption Settings ). For more information: https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-release-notes/pan-os-11-0-4-known-and-addressed-issues/pan-os-11-0-4-addressed-issues