topic Re: Software Upgrade in General Topics

Software Upgrade

darcymixon — Tue, 21 Jan 2014 23:22:50 GMT

Hi Everyone - I have a 4050 HA pair (4.0.12), 2050 HA pair (5.0.1) and several 500's (5.0.3). I am looking to upgrade the software on all firewalls but have had issues (typically high CPU and memory issues) with all these versions of code. Can you recommended a stable version of code? Does anyone have a similar set up (with the HA clusters) and a recommendation for code?

Thanks!

Re: Software Upgrade

sraghunandan — Tue, 21 Jan 2014 23:29:08 GMT

Recommended and a stable release is 5.0.9

Re: Software Upgrade

frank_henry — Mon, 27 Jan 2014 16:49:57 GMT

5.0.10 not stable? Can anyone input on this?

Re: Software Upgrade

ericgearhart — Mon, 27 Jan 2014 18:22:05 GMT

I have pushed a PA 4020 that we have in tap mode (we throw a ton of data at it) to 5.0.10 and it's been solid. The User-ID agent was freaking out and reconnecting a bunch when we first did it, but that settled down.

"Uptime 13 days, 19:56:25" on the PA4020

Re: Software Upgrade

kdd — Tue, 28 Jan 2014 08:37:21 GMT

we use 5.0.5 for 5020-cluster and its stable and reliable since then

uptime 228 days

Re: Software Upgrade

bvandivier — Wed, 29 Jan 2014 00:02:00 GMT

RE: 5.0.10 not stable? Can anyone input on this?

5.0.10 has proven to be a stable release thus far however, we allow each release time in the field before recommending them as a stable release.

Re: Software Upgrade

nextgenhappines — Wed, 29 Jan 2014 04:15:25 GMT

I have one pair of 5060 running 5.0.10, so far so good. I have another 5 pair of 5060 running 5.0.7, and there are memory leak problem with mgmtsrtr process.

Re: Software Upgrade

frank_henry — Mon, 03 Feb 2014 19:40:13 GMT

@nextgenhappiness, thanks. So in HA no problems?

Re: Software Upgrade

ericgearhart — Mon, 03 Feb 2014 19:51:13 GMT

Frank the recently released 5.0.11 fixed some serious issues in 5.0.10's handling of HA. I pushed my PA 4020 to 5.0.11 today, so I can't speak to 5.0.11's stability at this point.

I would recommend you at least take a look at the fixes in 5.0.11.... there are some red flags in there that's making me avoid 5.0.10 like the plague.

I thought that after a year of 5.0 being out and the tenth minor revision, Palo Alto would have it together in terms of release stability, but apparently not 😕