topic Re: Linux RHEL kernel support isn't fast enough - problem in Cortex XDR Discussions

Linux RHEL kernel support isn't fast enough - problem

VRubio — Tue, 14 May 2024 16:23:33 GMT

Hello,

After using Cortex XDR on Linux RHEL for several months, we've observed that the support turnaround time for new RHEL kernels (from RHEL 6 to 9) is highly unpredictable. This can range anywhere from 2 to 10 weeks. Without supported kernels, the Cortex XDR agent switches to "partially protected" mode, which is unacceptable.

For instance, according to the official documentation of supported kernels: doc link

The latest supported kernel for RHEL 9 is 5.14.0-362.24.1.el9_3.x86_64, which was released on March 12, 2024. However, there has been no support for more recent kernels for RHEL 9, resulting in a delay of 2 months.

Multiple support tickets with Palo Alto have yielded no resolution, leading to a significant amount of back-and-forth communication.

Are you experiencing similar issues?
Is Palo Alto planning to improve the kernel support process?

Thank you

Re: Linux RHEL kernel support isn't fast enough - problem

VRubio — Thu, 16 May 2024 12:19:45 GMT

For Linux Kernel version support requests, Palo Alto asks to liaise with your SE/Account team to submit the request.
Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CpjvCAC

It would be more efficient to follow the release and improve the kernel support process.