Known Issues in CN-Series 11.x

Table of Contents

Review the list of known issues for CN-Series 11.x.

Issue ID	Description
PAN-211651	In Openshift PCI devices with no iommu support for VFIO, the DPDK fails to unbind until all processes have stopped using the PCI devices.
PAN-211651	Comm crash is observed in CN-DB, CN-GW, CN-MGMT pods during a CN-MGMT failover.
PAN-200440	CN-NGFWs and CN-MGMTs fail to establish connection on some Openshift environments due to some conditions listed in Openshift bug.
PAN-192676	In Open shift environments, it is observed that ping packets from CN-GW pods to/from external environments are dropped.
CN-177	The inbound traffic to secured applications fails to work with PAN-CNI 3.0.3 and 3.0.4 for Azure Kubernetes Service (AKS). Workaround: Use PAN-CNI 3.0.2 for AKS to deploy the CN-Series firewall successfully.
PLUG-17100	When onboarding an OpenShift 4.15 cluster, the cluster validation fails with an SSL certificate error. Workaround: If the Kubernetes plugin cannot connect to the Kubernetes API server, use IP address instead of DNS name in the API server configuration setup.