Version 23.06-01 July 6, 2023

Fixes

The following fixes are included in this upgrade:

• Fixes an issue where a GCP Gateway could not generate support-related diagnostic bundles.

• Fixes an issue where an NTP Profile was repeatedly applied to a Gateway even though no Profile change was introduced.

• Fixes an issue where an empty Address Object applied to a Gateway would result in a traffic processing issue.

• Fixes an issue where an unnecessary datapath self-heal would occur when simultaneously applying both an NTP Profile and Log Forwarding Profile to a Gateway. This issue would only surface if the Profiles are applied using orchestration since the operations are independent, would occur sequentially and all within a very short separation in time.

• Fixes an issue where an Ingress Gateway could issue an incorrect certificate when a Rule has been configured with a domain that contains more than 3 levels.

• Fixes an issue where frequent changes to an Address Object could result in the datapath not accepting further changes.

• Fixes an issue where a Reset on Deny (TCP Reset) would not be issued when traffic is processed by a Ruleset that uses FQDN Match.

• Fixes an issue where an L4_FW event was not consistently produced when for traffic processed by the Gateway.

• Fixes an issue where changing the WAF action from "Allow Log" to "Rule Default" could cause the datapath to restart multiple times.

• Fixes an issue where HTTP traffic with chunked Transfer-Encoding could cause large memory consumption in WAF that would trigger a datapath self heal Fix: Fixes a slow memory leak that results in a silent datapath restart that could disrupt traffic.

• Fixes a memory issue that could result in a datapath self heal.