OPERATIONAL DEFECT DATABASE
...
...
BugZero updated this defect 137 days ago.
Fixed an issue wherer DNS proxy TCP connections were processed incorrectly, which caused a process (`dnsproxy`) to stop responding.
dnspropyd crash / high CPU
tcp_wait_timer on the daemon didn't cleared correctly
Workaround is to disable TCP connection through DNSproxy daemon, to safely avoid any ability issues with proxied TCP requests.
8.95
Fixed an issue where, on Apple iOS devices, SAML authentication did not connect to the GlobalProtect portal.9.15
Fixed an issue where firewall administrators were unable to log in to the web interface when RADIUS two-factor authentication was used.8.95
Fixed an issue with firewalls in HA configurations where ARP and IPv6 multicast packets were transmitted from the passive firewall.8.95
Fixed an issue where enabling Inline Cloud Analysis on Anti-Spyware, Vulnerability Protection, or URL Filtering Security profiles caused the dataplane to stop responding.8.95
Fixed an issue in NGFW's where, when SD-WAN was configured, the dataplane restarted if all SD-WAN member links were down due to an out-of-memory (OOM) condition or during a reboot when all SD-WAN tunnels were down.
