Focus

VM-Series and Panorama Plugins Release Notes

Addressed Issues in VM-Series Plugin 1.0.8

Table of Contents

Addressed Issues in VM-Series Plugin 1.0.8

Review issues addressed in the VM-Series plugin version 1.0.8.

The following list describes issues addressed in the VM-Series plugin 1.0.8.

PAN-111403

When bootstrapping the VM-Series firewall on Azure, if the bootstrap package includes a bootstrap.xml file, a software image, and a license auth code, the license is not applied successfully after the software image upgrade. Without a license the firewall capacity is limited—for example, it can support only two routers.

(This issue is fixed in VM-Series plugin 1.0.8) To fix this issue, upgrade PAN-OS to version 9.0.4 or later, then upgrade the VM-Series plugin to version 1.0.8. With this fix you can successfully bootstrap the VM-Series firewall on Azure.

PLUG-3108

HA behavior is inconsistent for VM-Series firewalls deployed on Azure.

(This issue is fixed in VM-Series plugin 1.0.8) To fix HA issues, upgrade the VM-Series plugin to version 1.0.8.

PLUG-3106

HA behavior is inconsistent for VM-Series firewalls deployed on Azure.

(This issue is fixed in VM-Series plugin 1.0.8) To fix HA issues, upgrade the VM-Series plugin to version 1.0.8.

PLUG-3095

Azure Application Insights is not supported for VM-Series firewalls running version PAN-OS 9.0.X deployed in Azure GovCloud.

(This issue is fixed in VM-Series plugin 1.0.8) To fix this issue, upgrade the PAN-OS version to 9.0.4 or later, and upgrade the VM-Series plugin to version 1.0.8.

PLUG-2503

HA behavior is inconsistent for VM-Series firewalls deployed on Azure.

(This issue is fixed in VM-Series plugin 1.0.8) To fix HA issues, upgrade the VM-Series plugin to version 1.0.8.

PLUG-2161

When a commit is issued from a PA-VM on Azure running PAN-OS 9.0.X and VM-Series plugin version 1.0.1 - 1.0.3, if the device is not able to resolve login.microsoftonline.com it can take up to three minutes to terminate the commit attempt. If PA-VM can resolve login.microsoftonline.com but cannot reach the FQDN address, it can take up to 20 minutes to terminate the commit attempt. These issues can affect failover recovery when a peer HA device is slow to terminate the commit attempt.

(This issue is fixed in VM-Series plugin 1.0.8) With this fix the firewall handles unresolved FQDNs more gracefully.

PLUG-1694

(PAYG licenses only) Your pay-as-you-go (PAYG) license is not retained when you upgrade from PAN-OS version 8.1 to PAN-OS 9.0.X.

(This issue is fixed in VM-Series plugin 1.0.8) To fix this issue, upgrade to PAN-OS 9.0.4 or later and VM-Series plugin 1.0.8. With this fix, the PAYG license is retained.

VM-Series Plugin 1.0.8

Changes to Default Behavior in VM-Series Plugin 1.0.8