topic Re: Palo Alto's preferred version 10.2 having significant issues in General Topics

Palo Alto's preferred version 10.2 having significant issues

ssingh — Wed, 31 Jul 2024 14:14:16 GMT

Hi All,

10.1 is going to be EOL in Dec-2024 and if we plan to upgrade on palo alto preferred ver 10.2 then There is a risk that the firewalls may experience significant issues ("popcorn effect"), potentially causing major disruptions to business operations like MFG, RDC, and RND.

Anyone has any update or having the same problem? we are waiting for stable ver 10.2 but palo alto have not released any stable ver with no issues.
Please advice?

Re: Palo Alto's preferred version 10.2 having significant issues

Claw4609 — Fri, 02 Aug 2024 19:31:46 GMT

Hello,

What specific issue are you referring to? In our environment we have been running versions of 10.2 for a little over a year now with no critically stopping issues. The current preferred version of 10.2 is 10.2.9-h1

Re: Palo Alto's preferred version 10.2 having significant issues

Adrian_Jensen — Sat, 03 Aug 2024 03:45:01 GMT

We had been running 10.2.9-h1 for 3 months without any issue as well. Had upgraded to 10.2.10 and had multiple out-of-memory issues yesterday and again today, rolling back to .9-h1 this evening.

Re: Palo Alto's preferred version 10.2 having significant issues

MP18 — Sat, 03 Aug 2024 22:14:13 GMT

@ssingh We are running 10.2.8-h3 without any issues for some time now.

Regards

Re: Palo Alto's preferred version 10.2 having significant issues

kathyuk — Tue, 06 Aug 2024 09:10:54 GMT

I've encountered several significant issues with Palo Alto's preferred version 10.2. It's been quite problematic and disruptive. Hoping for quick fixes and improvements in future updates.

Re: Palo Alto's preferred version 10.2 having significant issues

Brandon_Wertz — Tue, 06 Aug 2024 15:50:02 GMT

We've hit multiple bugs on 10.2.X. Supposedly 10.2.11 is going to be a "Major" release which will bring increased stability to the code train.

Recently my company hit a user ID bug twice where the IP to user-id mapping was wrong, which in turn causes incorrect security policy to be applied. It was identified as PAN-239366 which is fixed in these versions: "11.2.0, 11.1.3, 10.2.10, 10.2.11, 11.1.5, 10.2.4-h19, 12.1.0, 10.2.9-h9" (List I got from TAC, that said they didn't indicate an 11.0.X version which seems weird.)

There is a work around for this, which is to restart both firewalls (obviously very intrusive) or running this command "debug software restart process log-receiver." I'm not certain of the impact of that restart command.

Re: Palo Alto's preferred version 10.2 having significant issues

Brandon_Wertz — Tue, 06 Aug 2024 15:56:17 GMT

@ssingh wrote:

Hi All,

10.1 is going to be EOL in Dec-2024 and if we plan to upgrade on palo alto preferred ver 10.2 then There is a risk that the firewalls may experience significant issues ("popcorn effect"), potentially causing major disruptions to business operations like MFG, RDC, and RND.

Anyone has any update or having the same problem? we are waiting for stable ver 10.2 but palo alto have not released any stable ver with no issues.
Please advice?

@ssingh -- For myself as a longtime Palo customer I plan to upgrade all our 10.1 firewalls to 10.2.11, which is reported to be a stable release. Then stay on 10.2.11 until an 11.1.X version is out and stable (preferred.)

Re: Palo Alto's preferred version 10.2 having significant issues

ssingh — Wed, 07 Aug 2024 17:17:57 GMT

Thanks Brandon , but there's no 10.2.11 release as per the Palo Alto Software Release Guidance

Re: Palo Alto's preferred version 10.2 having significant issues

Brandon_Wertz — Wed, 07 Aug 2024 20:49:58 GMT

@ssingh wrote:

Thanks Brandon , but there's no 10.2.11 release as per the Palo Alto Software Release Guidance

Correct...I'm staying put on what works now...Waiting for 10.2.11 is released and preferred. Then riding 10.2.11 until there's a known / stable / released version of 11.1.X. Once that happens I'll moved off of 10.2.11.