The earliest recollection of this bug is traced back to PAN-OS 10.2.11 - March 11, 2025. This bug is fixed in PAN-OS versions 10.2.11, 11.1.6-h1, 11.2.2. ( VM-Series firewalls on Amazon Web Services (AWS) environments only ) Fixed an issue where the firewall did not perform MSS clamping when GWLB endpoints were mapped to static subinterfaces. For more information: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-11-known-and-addressed-issues/pan-os-10-2-11-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-h1-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-2-known-and-addressed-issues/pan-os-11-2-2-addressed-issues