Disclaimer

Hotfix versions were inferred because the vendor did not list them explicitly: 11.1.6-h1, 11.1.6-h2, 11.1.6-h3, 11.1.6-h4, 11.1.6-h5, 11.1.6-h6, 11.1.6-h7, 11.1.6-h8, 11.1.6-h9, 11.1.6-h10, 11.1.6-h11, 11.1.6-h12, 11.1.6-h13, 11.1.6-h14, 11.1.6-h15, 11.1.6-h16, 11.1.6-h17, 11.1.6-h18, 11.1.6-h19, 11.1.6-h20, 11.1.6-h21, 11.1.6-h22 Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 10.2.14-h1, 11.2.6

The earliest recollection of this bug is traced back to PAN-OS 10.2.15 - July 08, 2026. This bug is fixed in PAN-OS versions 10.2.15, 11.1.6-h23, 11.2.7, 11.1.11. Fixed an issue where push operations from Panorama failed on passive firewalls when an application was removed from a Security policy rule and the policy rule was referenced in a device group. For more information: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-15-known-and-addressed-issues/pan-os-10-2-15-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-11-known-and-addressed-issues/pan-os-11-1-11-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-h23-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-7-known-and-addressed-issues/pan-os-11-2-7-addressed-issues