topic Re: PAN-OS 10.1.x recommended version for PA-850 device in General Topics

PAN-OS 10.1.x recommended version for PA-850 device

Ramees — Mon, 08 Nov 2021 04:54:56 GMT

hello,

will the new version 10.1.3 be recommended for PA 850 ? Has anyone faced any issues.

Re: PAN-OS 10.1.x recommended version for PA-850 device

TomYoung — Mon, 08 Nov 2021 05:07:05 GMT

PAN-OS 10.1 is so new that there is no recommended release for it yet -> https://live.paloaltonetworks.com/t5/customer-resources/support-pan-os-software-release-guidance/ta-p/258304. I have it installed on 1 production firewall with no issues. I see no known issues related to the PA-850 -> https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes.html.

PAN-OS 10.1.3 would have the most bug fixes. So, I would go with it. If you want new features in 10.1, I would go with the latest release. Otherwise, 10.0 is definitely more safe. Typically, I wait 12 months before putting a new release into production.

Thanks,

Tom

Re: PAN-OS 10.1.x recommended version for PA-850 device

Ramees — Mon, 08 Nov 2021 05:21:10 GMT

thanks. I did the upgrade on a green field environment and i see occasional CPU spikes which concerns me .

Re: PAN-OS 10.1.x recommended version for PA-850 device

TomYoung — Mon, 08 Nov 2021 05:26:20 GMT

Yeah, I have noticed that 10.x runs a little slower than 9.x on many firewalls. I have installed in on a PA-220. There is a known issue that "PA-220 firewalls are experiencing slower web interface and CLI performance times." Because of that bug, the CPU spikes and slowness are a lot worse. However, the data plane seems fine.