topic Re: PAN-OS Known issues and Upgrades in Next-Generation Firewall Discussions

PAN-OS Known issues and Upgrades

mkgsgi — Thu, 12 Jan 2023 15:49:44 GMT

Hello Everyone,

In general, what is the industry practice to patch vulnerabilities in the PAN-OS. From time to time, Palo Alto release PAN-OS upgrades versions. However, with each new version there are known issues. Some of the known issues are fixed via the next new PAN-OS version and some of the known issues are not fixed by upgrades. For example, PAN OS version 10.1.4-h4 has lot of known issues and two of the high-risk issues (a - https://security.paloaltonetworks.com/CVE-2022-0024 b - https://security.paloaltonetworks.com/CVE-2022-0028 ) were fixed by much later version of PAN-OS.

In interim, till Palo upgrades the PAN-OS version to fix known issues from prior version, what is a general (best) practice to deal with the known issues?

Does every one wait for Palo to release new PAN-OS version or try to fix high risk issues such as two examples above alternatively.

Re: PAN-OS Known issues and Upgrades

Raido_Rattameister — Thu, 12 Jan 2023 15:53:59 GMT

Palo Alto TAC is keeping track of preferred releases.

10.1.x branch preferred release is 10.1.8-h2

It is always smart to check known issues for specific release before upgrade.

https://live.paloaltonetworks.com/t5/customer-resources/support-pan-os-software-release-guidance/ta-p/258304

Re: PAN-OS Known issues and Upgrades

mkgsgi — Thu, 12 Jan 2023 16:03:19 GMT

@Raido_Rattameister Thank you for the response. It seems access to the link above is denied.

Re: PAN-OS Known issues and Upgrades

Raido_Rattameister — Thu, 12 Jan 2023 16:08:20 GMT