Disclaimer

Hotfix versions were inferred because the vendor did not list them explicitly: 11.1.10-h1, 11.1.10-h2, 11.1.10-h3, 11.1.10-h4, 11.1.10-h5, 11.1.10-h6, 11.1.10-h7, 11.1.10-h8, 11.1.10-h9, 11.1.10-h10, 11.1.10-h11, 11.1.10-h12, 11.1.10-h13, 11.1.10-h14, 11.1.10-h15, 11.1.10-h16, 11.1.10-h17, 11.1.10-h18, 11.1.10-h19, 11.1.10-h20, 11.1.10-h21, 11.1.10-h22, 11.1.10-h23, 11.1.10-h24, 11.1.10-h25, 11.1.10-h26, 11.1.10-h27

The earliest recollection of this bug is traced back to PAN-OS 11.1.10-h28 - July 31, 2026. This bug is fixed in PAN-OS versions 11.1.6-h34., 11.1.16., 11.1.13-h8., 11.1.10-h28. ( Firewalls in FIPS mode only ) Fixed an issue where GlobalProtect unexpectedly prompted for RADIUS authentication instead of client certificate authentication due to an OSCP validation error and subsequent CRL verification failure, which led to certificates being marked as invalid. For more information: https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-10-known-and-addressed-issues/pan-os-11-1-10-h28-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addressed-issues/pan-os-11-1-13-h8-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-16-known-and-addressed-issues/pan-os-11-1-16-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-h34-addressed-issues