Disclaimer

Hotfix versions were inferred because the vendor did not list them explicitly: 11.2.4-h1, 11.2.4-h2, 11.2.4-h3

The earliest recollection of this bug is traced back to PAN-OS 11.2.4-h4 - July 08, 2026. This bug is fixed in PAN-OS versions 11.2.5, 11.2.4-h4. Fixed an issue where upgrading Panorama and pushing configurations to the firewall caused an IKE version mismatch, which resulted in IPSec tunnel failure with the peer device. For more information: https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-4-known-and-addressed-issues/pan-os-11-2-4-h4-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-5-known-and-addressed-issues/pan-os-11-2-5-addressed-issues