topic Upgrade 5450 to 11.1.6h10 in Next-Generation Firewall Discussions

Upgrade 5450 to 11.1.6h10

BlackWater — Fri, 01 Aug 2025 21:01:12 GMT

I am currently on 10.2.10-h9 going to 11.1.6h10 (preferred). Has anyone experienced any issue with the new release on 5450 FW?

In the past I upgraded to 11.1.4-h7 and it went horribly BAD. Not the upgrade process but that release 11.1.4-h7 has bugs. Non of the websites we are hosting were accessible. sometimes it works and other time so much delay.

Your help is greatly appreciated.

Re: Upgrade 5450 to 11.1.6h10

Mudhireddy — Sun, 03 Aug 2025 17:21:52 GMT

Your concern is valid, as 11.1.4-h7 had known bugs, especially with SSL/website traffic.

While 11.1.6-h10 addresses some dataplane stability issues (which is good), there are still reports of bugs, including a serious one affecting multi-vsys setups.

Recommendations:

Check for a newer hotfix. The 11.1 train is still maturing. Look for a more recent hotfix like 11.1.6-h14, as it will contain more fixes.
Review release notes carefully. Look for any fixes related to your previous SSL/website issues.
Open a support case. It's wise to confirm with Palo Alto support that the issues you experienced are fully resolved in your target version before you upgrade.

Re: Upgrade 5450 to 11.1.6h10

BlackWater — Mon, 04 Aug 2025 17:43:04 GMT

Thank you for the update. So, what is a stable release in 11 that we can go to ?