BugZero | Palo Alto Networks BugID PAN-290919 - ( VM-Series firewalls only ) Fixed an issue where ...

OPERATIONAL DEFECT DATABASE

...

BugZero | Palo Alto Networks BugID PAN-290919 - ( VM-Series firewalls only ) Fixed an issue where ...

Palo Alto Networks - Defect ID: PAN-290919

( VM-Series firewalls only ) Fixed an issue where file download speeds and performance was slower than expected for Prisma Access mobile users when SSL decryption was enabled. To use this fix, run the CLI command debug dataplane set ssl-decrypt fptcp-rto min <100-500> .

Palo Alto Networks - Defect ID: PAN-290919

( VM-Series firewalls only ) Fixed an issue where file download speeds and performance was slower than expected for Prisma Access mobile users when SSL decryption was enabled. To use this fix, run the CLI command debug dataplane set ssl-decrypt fptcp-rto min <100-500> .

Last updated on September 2nd, 2025

BugZero Risk Score
6.3 Medium

Overall: 6.3

Severity: 6.4

Community: 3.7

Lifecycle: 10.0

What is the BugZero Risk Score?

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Description

The earliest recollection of this bug is traced back to PAN-OS 11.1.10-h4 - September 02, 2025. This bug is fixed in PAN-OS versions 11.1.6-h17, 11.1.10-h4. ( VM-Series firewalls only ) Fixed an issue where file download speeds and performance was slower than expected for Prisma Access mobile users when SSL decryption was enabled. To use this fix, run the CLI command debug dataplane set ssl-decrypt fptcp-rto min . For more information: https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-10-known-and-addressed-issues/pan-os-11-1-10-h4-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-h17-addressed-issues

Change history

2025-09-02 Added: 11.1.10-h4

2025-08-20 Added: 11.1.6-h17

Top Palo Alto Networks Defects

6.3Defect ID: PAN-292228
Fixed an issue where, after configuring dual stack GlobalProtect with both IPv4 and IPv6 address pools, IPv6 return traffic was dropped with the error message flow-basic error; packet dropped, tunnel resolution failure .
6.3Defect ID: PAN-293511
Fixed an issue where renaming a BGP filtering profile in Panorama does not update the corresponding BGP peer group in the virtual router, leading to commit failures.
6.3Defect ID: PAN-286615
Fixed an issue where the firewall double-freed shared memory when the shared memory usage reached 100% when sending large payloads. This occurred when DLP, Advanced Advanced Threat Protection (ATP), Advanced WildFire (AWF), or Advanced URL Filtering were enabled.
6.3Defect ID: PAN-291792
( PA-7050 firewalls on vwire instances only ) Fixed an issue where Bidirectional Forwarding Detection (BFD) echo packets were dropped due to the firewall dropping packets with the same source and destination IP addresses.
6.3Defect ID: PAN-290919
( VM-Series firewalls only ) Fixed an issue where file download speeds and performance was slower than expected for Prisma Access mobile users when SSL decryption was enabled. To use this fix, run the CLI command debug dataplane set ssl-decrypt fptcp-rto min <100-500> .

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Ready to prevent the next vendor outage?

Get a demo

OPERATIONAL DEFECT DATABASE

Palo Alto Networks - Defect ID: PAN-290919

( VM-Series firewalls only ) Fixed an issue where file download speeds and performance was slower than expected for Prisma Access mobile users when SSL decryption was enabled. To use this fix, run the CLI command debug dataplane set ssl-decrypt fptcp-rto min <100-500> .

Palo Alto Networks - Defect ID: PAN-290919

( VM-Series firewalls only ) Fixed an issue where file download speeds and performance was slower than expected for Prisma Access mobile users when SSL decryption was enabled. To use this fix, run the CLI command debug dataplane set ssl-decrypt fptcp-rto min <100-500> .

Last updated on September 2nd, 2025

BugZero Risk Score6.3 Medium

Bug Details

Links

Top Palo Alto Networks Defects

Ready to prevent the next vendor outage?

BugZero Risk Score
6.3 Medium