topic Re: PANOS 4.1.0 has a major FLAW in General Topics

PANOS 4.1.0 has a major FLAW

mharb — Tue, 06 Dec 2011 03:40:48 GMT

where do should I get support to fix a critical ad major issue with PA 5050 running 4.1.0.

When issuing "commit" command the unit drop connenctions and teh arp tables get corrupted for about 30 minutes.

As far as PaloAlto Support the issues is major and was discovered two weeks ago when troubleshooting with CB but the fix won't be available for anotehr 6 weeks.

I think that is not fair and someone need to Tell Nir Zuk we need fast response because one of teh reason I dropped Checkpoint 8 years ago was because of lack of response to customer and the turn around on fixing bugs.

Re: PANOS 4.1.0 has a major FLAW

essnet — Tue, 06 Dec 2011 07:51:37 GMT

Hello,

Thank you for sharing this information. we're mass-deploying 4.1 and our 5050 pair is next.

Re: PANOS 4.1.0 has a major FLAW

mharding — Tue, 06 Dec 2011 13:55:29 GMT

Have you asked if there is a hotfix?

Re: PANOS 4.1.0 has a major FLAW

SimasK — Tue, 06 Dec 2011 14:10:41 GMT

If anyone will find firewall vendor which cares about its customers, please let me know :smileylaugh:

Re: PANOS 4.1.0 has a major FLAW

mbenoit — Tue, 06 Dec 2011 18:03:21 GMT

Hi, I'm very sorry that you are experiencing issues with 4.1. Can you message me with your support case number so that I can research this and assist you in getting resolution?

Best Regards,

Marc

Re: PANOS 4.1.0 has a major FLAW

jloehndorf — Tue, 06 Dec 2011 20:04:23 GMT

Thanks for the heads up. Was going to upgrade a pair of PA 2020s and begin deployment of PA 5050s using 4.1. The PA 2020 upgrade will wait.

The PA 5050 deployment will be on hold.

Re: PANOS 4.1.0 has a major FLAW

MichaelBurgener — Tue, 06 Dec 2011 22:22:43 GMT

Thanks for the info. Palo Alto Support people, if you have such a critical bug you should pull the update. Having a major issue like this is going to cause everyone major issues when it can be avoided. I will delay our rollout as well.

Re: PANOS 4.1.0 has a major FLAW

john.croft — Wed, 07 Dec 2011 03:24:18 GMT

We're running 4.1.0 on an active/active pa5050 pair.

I have shut down one pa5050 due to asymetric routing issues that are my fault

( addressed in a PA OSPF tech note - https://live.paloaltonetworks.com/docs/DOC-1939 ). Lots of non-syn-tcp streams.

I sometimes see commit problems with my ospf routers (Cisco, Avaya) connected to the PA's, mostly when I make Device -> Interface changes. They were especially annoying when both PA's were active. Panorama policy pushes don't seem to cause these hiccups.

I'm intending to upgrade to 4.1.1, hopefully tomorrow morning.

Re: PANOS 4.1.0 has a major FLAW

essnet — Wed, 07 Dec 2011 12:22:59 GMT

According to this doc: https://live.paloaltonetworks.com/docs/DOC-1982 4.1.1 may not have the fix :smileygrin:

Re: PANOS 4.1.0 has a major FLAW

mikand — Sun, 08 Jan 2012 16:39:00 GMT

Has this been resolved yet?

Re: PANOS 4.1.0 has a major FLAW

songkrant — Fri, 20 Jan 2012 19:08:42 GMT

I am on single unit of PA-5060 using PAN OS 4.1.2 for 20 hours seem to be all right with 5,000 users.

Let's see how it will be when 1,000 more users came back from vacation on next week.

Thanks to PAN Support Team who finally solve a lot of issues.

(^_^)

Songkrant

Re: PANOS 4.1.0 has a major FLAW

john.croft — Fri, 22 Jun 2012 00:43:31 GMT

Just wanted to say we're now running 4.1.4, with some PA Support provided workarounds (thanks JW).

Full Active/Active at two sites, ospf and commit problems gone too.

4.1.7 is sleighted to have all the workarounds included or fixed.