Disclaimer

Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 11.1.13-h10

The earliest recollection of this bug is traced back to PAN-OS 11.1.14 - August 11, 2026. This bug is fixed in PAN-OS versions 11.1.14. ( Firewalls in active/active HA configurations only ) Fixed an issue where NAT failures occurred due to the IP pool not releasing unused resources in the Active Secondary firewall. This occurred because the secondary firewall attempts to release a Persistent DIPP NATed port that was originally allocated by the NAT policy from first firewall, leading to a ownership mismatch during the session teardown process. For more information: https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-14-known-and-addressed-issues/pan-os-11-1-14-addressed-issues