topic Re: Pan-OS 10.2.13-h4 known issues in Next-Generation Firewall Discussions

Pan-OS 10.2.13-h4 known issues

pavel.sharypov — Sat, 22 Feb 2025 20:08:35 GMT

Hello everyone,

Can I ask if anyone already installed Pan-OS 10.2.13-h4 on their firewalls? Any issues with this hotfix?

I am hesitant to install it after reading reddit comments about the 10.2.13-h3 and how it breaks IPv6.

Re: Pan-OS 10.2.13-h4 known issues

Shadmin — Sun, 23 Feb 2025 21:49:47 GMT

Just upgrade to 10.2.13h4 from 10.2.12h2 over the weekend, firewall locked up, I am running AWS version still trying to figure out what the issue was.

Re: Pan-OS 10.2.13-h4 known issues

ozheng — Mon, 24 Feb 2025 01:30:53 GMT

Hello @pavel.sharypov ,

I would suggest you to upgrade one device and monitor first if any side effect.

As its name implies, it is a hotfix version, it has its associated risks compared to a normal release.

Regarding the feedback from third party, I would suggest for you to take it "as is" ("zero trust" mindset, always verify the facts).

Olivier

Re: Pan-OS 10.2.13-h4 known issues

pavel.sharypov — Wed, 26 Feb 2025 17:54:28 GMT

I upgraded several firewalls and I am noticing an issue with Azure SAML when the authentication page shows as blank. If I restart Windows or pangp service on the affected laptops, then the authentication page shows normal.

Found this article but adding additional azure authentication portals into fqdn exception list doesn't seem to fix the issue.

Globalprotect SAML Authentication login screen does not load an... - Knowledge Base - Palo Alto Networks

Enforce GP Connection feature is on. I didn't see this issue at all before installing pan-os 10.2.13-h4. GP logs also don't show any blocked fqdn so now I am hesitant to apply 10.2.13-h4 on every firewall to be honest.

Re: Pan-OS 10.2.13-h4 known issues

pavel.sharypov — Wed, 26 Feb 2025 18:00:20 GMT

I am using an embedded browser for SAML authentication. It turns out that it is something related to the window size. When I stretched it a bit, the login page appeared without any issues 😑

Re: Pan-OS 10.2.13-h4 known issues

ozheng — Mon, 03 Mar 2025 02:29:00 GMT

this is a GP client issue, not PAN-OS issue 😉