Disclaimer

Hotfix versions were inferred because the vendor did not list them explicitly: 11.1.6-h1, 11.1.6-h2, 11.1.6-h3, 11.1.6-h4, 11.1.6-h5, 11.1.6-h6, 11.1.6-h7, 11.1.6-h8, 11.1.6-h9, 11.1.6-h10, 11.1.6-h11, 11.1.6-h12, 11.1.6-h13, 11.1.6-h14, 11.1.6-h15, 11.1.6-h16, 11.1.6-h17, 11.1.6-h18, 11.1.6-h19, 11.1.6-h20, 11.1.6-h21, 11.1.6-h22, 11.2.7-h1, 11.2.7-h2, 11.2.7-h3, 11.2.7-h4, 11.2.7-h5, 11.2.7-h6, 11.2.7-h7

The earliest recollection of this bug is traced back to PAN-OS 11.1.6-h23 - July 08, 2026. This bug is fixed in PAN-OS versions 11.1.8, 11.1.6-h23, 11.2.8, 11.2.7-h8. Fixed an issue where the GlobalProtect client (UWP) or metered hotspot connections triggered TLS resumption fo GlobalProtect portal authentication, which caused the portal authentication to fail with a valid cert required error. Fixed an issue where the GlobalProtect client (UWP) or metered hotspot connections triggered TLS resumption for GlobalProtect portal authentication, which caused the portal authentication to fail with a valid cert required error. For more information: https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-h23-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-8-known-and-addressed-issues/pan-os-11-1-8-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-7-known-and-addressed-issues/pan-os-11-2-7-h8-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-8-known-and-addressed-issues/pan-os-11-2-8-addressed-issues