Disclaimer

Hotfix versions were inferred because the vendor did not list them explicitly: 11.0.3-h1, 11.0.3-h2, 11.0.3-h3, 11.0.3-h4 Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 10.1.13-h5, 10.2.9-h21, 11.1.2-h18

The earliest recollection of this bug is traced back to PAN-OS 10.1.14 - July 22, 2025. This bug is fixed in PAN-OS versions 10.2.10, 10.1.14, 11.0.3-h5, 11.1.3. Fixed an issue on firewalls in HA configurations where VXLAN sessions were allocated, but not installed or freed, which resulted in a constant high session table usage that was not synced between the firewalls. This resulted in a session count mismatch. For more information: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes/pan-os-10-1-14-known-and-addressed-issues/pan-os-10-1-14-addressed-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-10-known-and-addressed-issues/pan-os-10-2-10-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-release-notes/pan-os-11-0-3-known-and-addressed-issues/pan-os-11-0-3-h5-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-3-known-and-addressed-issues/pan-os-11-1-3-addressed-issues