Preferred version for update

BPSoftware — Thu, 10 Oct 2024 03:28:18 GMT

Hi,

Just looking for advise on suggested upgrade versions

I have two VM-100s running 10.2.8-h3 and a PA-820 running 10.2.8. I need to upgrade them all in response to the CVE below.

I'm a bit confused as both the Palo Alto preferred versions 10.2.9-h1 and 11.1.4-h1 listed here Support PAN-OS Software Release Guidance | Palo Alto Networks make reference to a global protect issue. 10.2.9-h1 is affected by the CVE also. I need global protect.

CVE-2024-9468 PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet (paloaltonetworks.com)

topic Preferred version for update in Next-Generation Firewall Discussions

Preferred version for update