OPERATIONAL DEFECT DATABASE
...
...
BugZero updated this defect 37 days ago.
Fixed an issue where custom URL categories hit incorrect URL categories, which caused the firewall to miss or deny the security policies for the configured custom URL
URL category lookup fails
Id-manager mis-manage the table on commit , caused URL pattern lost on DP
For customers using custom URL categories only (NO EDL-URL), before committing any URL pattern changes, perform a "Commit force" job first. Thencommit the URL pattern changes (or push changes from panorama). For customers using EDL-URL, if customer host the EDL-URL themselves, before they update the URL patterns, perform a "Commit force" job first.if customer uses 3rd party provided EDL, there's no good workaround. They can lower the EDL refresh frequency to reduce the chance of hitting this issue, andif customer has hit this issue, do commit-force twice to temporarily resolve this issue.
8.95
Fixed an issue where custom URL categories hit incorrect URL categories, which caused the firewall to miss or deny the security policies for the configured custom URL8.95
Fixed an issue where the dataplane restarted repeatedly after a reboot due to an internal path monitoring failures until a power cycle.8.95
Fixed an issue where the firewall unexpectedly rebooted with the log message "Heartbeat failed previously"8.95
Fixed an issue where GlobalProtect IPSec tunnels disconnected at half the inactivity logout timer value.9.7
Fixed an issue where sessions were dropped with the message `resource-unavailable` due to the content inspection queue filling up.8.95
Fixed an issue where custom URL categories hit incorrect URL categories, which caused the firewall to miss or deny the security policies for the configured custom URL8.95
Fixed an issue where the dataplane restarted repeatedly after a reboot due to an internal path monitoring failures until a power cycle.8.95
Fixed an issue where the firewall unexpectedly rebooted with the log message "Heartbeat failed previously"8.95
Fixed an issue where GlobalProtect IPSec tunnels disconnected at half the inactivity logout timer value.9.7
Fixed an issue where sessions were dropped with the message `resource-unavailable` due to the content inspection queue filling up.
