Policy Tab Issue Persisting Across PAN-OS Versions

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Policy Tab Issue Persisting Across PAN-OS Versions

L1 Bithead

Hello All,

 

The customer is currently running PAN-OS 11.1.15. This issue is reportedly addressed in this release; however, the customer continues to experience the same behavior.

 

Issue Description:

The issue is related to the Policy tab. The customer is unable to perform any policy management operations, including:

  • Adding new policies
  • Cloning existing policies
  • Enabling or disabling policies
  • Deleting policies

 

The customer has also encountered the same issue on PAN-OS 12.1.4-h5 and 12.1.4-h6, due to which they downgraded the device to PAN-OS 11.1.14. However, remaining on 11.1.14 is not a viable option because the customer needs to address the following security vulnerabilities:

  • CVE-2026-0273
  • CVE-2026-0257
  • CVE-2026-0264
  • CVE-2026-0265
  • CVE-2026-0263
  • CVE-2026-0261
  • CVE-2026-0259
  • CVE-2026-0262
Warm Regards,
Sambhav Jain
Security Support Engineer | Palo Alto Support
1 REPLY 1

L0 Member

Hello,

do you see backtrace files in cli using the command "less mp-backtrace ?". If so, do these files start with configd- and when you see the content, it shows a stack similar to this one:
Thread 1 (LWP 26793):
#0 0x00007fe0c2f9791c in __strlen_evex () from /lib64/libc.so.6
#1 0x00007fe0c2ececb2 in strdup () from /lib64/libc.so.6
#2 0x00007fe0c3914702 in pan_ms_db_get_ruleapp_info () from /usr/local/lib64/libpanmp_mp.so.1
#3 0x00007fe0c392893d in getAppIdDetails () from /usr/local/lib64/libpanmp_mp.so.1
#4 0x00007fe0c3c424d4 in pan_mgmtop_show_policy_app_details () from /usr/local/lib64/libpanmp_mp.so.1
#5 0x00007fe0c397529e in pan_cfg_execute_mgmtop () from /usr/local/lib64/libpanmp_mp.so.1
#6 0x00007fe0c390a211 in pan_cfg_handle_op () from /usr/local/lib64/libpanmp_mp.so.1
#7 0x00007fe0c38563f9 in pan_cfg_engine_execute_request () from /usr/local/lib64/libpanmp_mp.so.1
#8 0x00007fe0c39e7a32 in pan_cfg_mgr_handle_local_request () from /usr/local/lib64/libpanmp_mp.so.1
#9 0x00007fe0c39edb8f in pan_cfg_mgr_handle_xml () from /usr/local/lib64/libpanmp_mp.so.1
#10 0x00007fe0c39ef2ea in pan_cfg_mgr_handle_request_ex () from /usr/local/lib64/libpanmp_mp.so.1
#11 0x00007fe0c39f0f19 in pan_cfg_mgr_handle_request_int () from /usr/local/lib64/libpanmp_mp.so.1
#12 0x00007fe0c3638e9f in pan_connmgr_process_request () from /usr/local/lib64/libpanmp_mp.so.1
#13 0x00007fe0c3620bc9 in pan_cs_taskmgr_handle_request () from /usr/local/lib64/libpanmp_mp.so.1
#14 0x00007fe0c436aa24 in _taskq_worker () from /usr/local/lib64/libpanmp_mp.so.1
#15 0x00007fe0c1cb81ca in start_thread () from /lib64/libpthread.so.0
#16 0x00007fe0c2f44953 in clone () from /lib64/libc.so.6

Regards,

John

  • 67 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!