The earliest recollection of this bug is traced back to PAN-OS 12.1.5 - March 31, 2026. This bug is fixed in PAN-OS versions 12.1.5. Fixed an issue where the user, region, and external IP address were reported as unknown in the AppSec logs due to an incorrect packet adjust logic. For more information: https://docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-5-known-and-addressed-issues/pan-os-12-1-5-addressed-issues