Disclaimer

Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 10.2.7-h34, 11.0.4-h6

The earliest recollection of this bug is traced back to PAN-OS 10.2.8 - July 22, 2025. This bug is fixed in PAN-OS versions 11.0.5, 11.2.0, 10.2.8. Fixed an issue where, when LSVPN serial numbers and IP address authentication were enabled, IPv6 address ranges and complete IPv6 addresses that were manually added to the IP address allow or exclude list were not usable after a restart of the gp_broker process or the firewall. For more information: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-8-known-and-addressed-issues/pan-os-10-2-8-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-release-notes/pan-os-11-0-5-known-and-addressed-issues/pan-os-11-0-5-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-0-known-and-addressed-issues/pan-os-11-2-0-addressed-issues