topic Re: PAN-OS 5 in General Topics

PAN-OS 5

LCMember2860 — Wed, 14 Nov 2012 09:43:47 GMT

so the long-awaited v5 is now available. What are the implications of upgrading to it?

is rollback to v4 straightforward (we're on 4.1.8 now)?
does it force you to use the new PAN web-filtering database, or can you continue to use Brightcloud?
Do we need to make changes to our rulebase (in particular WRT to the changes in the way app dependencies work in v5)?

I don't particularly want to be a guinea-pig, but I am keen to see what improvements have been made.

Re: PAN-OS 5

dyang — Wed, 14 Nov 2012 15:53:12 GMT

As far as URL filtering goes, the 5.0 release simply gives you the option of using PAN-DB for URL filtering instead of BrightCloud; you are not forced to use either. BrightCloud is and will be fully supported, so you may continue to use and purchase licenses for it.

Re: PAN-OS 5

almay — Wed, 14 Nov 2012 16:04:25 GMT

I was told by support a couple of times that site-to-site VPN Proxy ID capacity would be increased from 10 to 250 IDs per tunnel interface. As well as support for Google safe image search. Has this been verified by anyone?

Re: PAN-OS 5

Retired Member — Wed, 14 Nov 2012 19:25:10 GMT

Regarding app dependencies in rulebase, you can upgrade from 4.1.8 to 5.0.0 fine as any explicit allow rules that you already have for app dependencies will continue to work as it did before. So there should be no modifications needed there. Regarding proxy-id limits increased, this has been increased from max of 10 to 250 for all platforms except for PA-200. PA-200 will support up to 25 proxy-ids.

Regarding Google safe image support, please contact your Palo Alto Networks sales rep for information about upcoming new features.

-Richard

Re: PAN-OS 5

RNC — Thu, 15 Nov 2012 10:45:26 GMT

What are the benefits of PAN URL-DB over BrightCloud to your customers?

Kind regards & Thanks.