topic Re: Minor patch release date for 11.1.8 in Next-Generation Firewall Discussions

Minor patch release date for 11.1.8

JohnstonM — Fri, 27 Dec 2024 18:30:59 GMT

I have run into a situation when we upgraded our environment to 11.1.4-h7, where from the Panorama, I can not modify existing rule sets with my radius authenticated account. This environment is government, so STIGS are used (this should allay any odd questions). The only solution TAC gave was to create a local admin account and use for said modifications. While this is a band-aid, it will be found upon periodic audits. TAC also stated that this is a known issue and is slated to be fixed in patch 11.1.8 (potentially January 18th). Now, I realize it's hard to post "proposed" date of release calendar, but it would at least help when questioned by a review board. Has anyone, come across something similar to a pre-release calendar? I mean if you're using a CI/CD pipeline for these, this would be a very simple thing and it could auto update if engineering needs to slide the window out.

-MJ

Re: Minor patch release date for 11.1.8

OtakarKlier — Fri, 27 Dec 2024 18:44:10 GMT

Hello,

While I understand your stance on this, take a look at the vendors position. If they say something, then push it out, it could look poorly on them. Also if they say we are going to release it on date x and they dont, it can cause additional tension on them as well as potential legal issues.

So they do it this way to keep their options for a release date open. There are a lot of vendors that also have adopted this method.

Regards,

Re: Minor patch release date for 11.1.8

JohnstonM — Fri, 27 Dec 2024 19:00:35 GMT

I completely see that point. Now to counter, if TAC is stating it "verbally", wouldn't something of this sort, cut down on the number of calls for the same issue? I'm only wanting something that could be referenced in a change control review board (they don't like "they said").

Re: Minor patch release date for 11.1.8

OtakarKlier — Fri, 27 Dec 2024 20:44:35 GMT

Hello,

I understand your point. I dont work for the company nor can I speak to their internal processes. I also understand the change board and their stance and wanting something concrete, but not everything can be.

Regards,