topic Re: Anyone having issues with PAN OS 4.0.7 in General Topics

Anyone having issues with PAN OS 4.0.7

opiedrah — Fri, 11 Nov 2011 23:04:36 GMT

We have been contemplating upgrading our 4.0.5 appliances to 4.0.7. Has any experienced any show stopper issues with this release yet?

Thanks.

Re: Anyone having issues with PAN OS 4.0.7

shasnain — Tue, 15 Nov 2011 16:27:26 GMT

Hello,

I have got customers using the 4.0.5 version and have complained about the Memorly leak and High CPU on DP. I have requested them to go over to 4.0.7 and since then I have not heard back from them with any issues with the 4.0.7 Version. It is a very stable and strong version and I would Highy recommend you to go with 4.0.7.

Thanks.

Re: Anyone having issues with PAN OS 4.0.7

opiedrah — Tue, 15 Nov 2011 19:51:07 GMT

Is the stuck jobs while downloading fixed in this release?

Re: Anyone having issues with PAN OS 4.0.7

Trajewski — Tue, 15 Nov 2011 21:01:17 GMT

Personaly, I just would like to let you know 4.0.7 is stable. Such OS I have installed on PA-500 cluster and after software upgrade it is working fine. It seems to work a little bit faster then 4.0.5 but it is my opinion.

Re: Anyone having issues with PAN OS 4.0.7

mharding — Wed, 16 Nov 2011 01:00:35 GMT

Very stable. It's been running like a champ on our 2050s.

Re: Anyone having issues with PAN OS 4.0.7

wayne_webner — Wed, 16 Nov 2011 17:09:28 GMT

I concur, since upgrading to 4.0.7 we seen the memory leak on the management plane ( did not see this on dataplane ) resolved. Some of the issues within the release notes were applicable to our environment, to this end those fixes have worked as expected.

Some issues noted

1. We see alot of pan agent read-log alerts in the console since 4.0.7 upgrade ( when checking the connections there appears to be no problem so this may be spurious)

2. On one of my 2020's i sometimes still get the AV and application definition update downloads in a hung state. I have not see this on my 4020 HA pair however.

That said, thus far, 4.0.7 appears to be much better than 4.0.5 which caused some frustration.

As one of my team aptly put it.. he can sit and sip on a lemonade watching the packets flow by without spilling on himself...

Re: Anyone having issues with PAN OS 4.0.7

opiedrah — Wed, 16 Nov 2011 18:45:10 GMT

Thanks for the input so far, i have our SE looking into the stuck download job issues, from what you tell me, it appears it has not yet been fixed. I've upgraded a pair of PANS to 4.0.7. I'll update about how it goes.

Re: Anyone having issues with PAN OS 4.0.7

bchan — Wed, 16 Nov 2011 19:12:53 GMT

I had just upgraded from panos 4.0.5 to 4.0.7 due to a data plane memory issue. Currently, I'm monitoring it to see how things go for the day.

As for the stuck jobs, try the following from the CLI:

1. show jobs all

2. Look under the status column for problems.

3. Make note of the ID column that's associated with the failed or stuck job.

4.. clear job id IDNumber Ex: clear job id 24

This worked for me everytime something goes wrong with the subcribed updates, can't download, and can't commit jobs.

Re: Anyone having issues with PAN OS 4.0.7

opiedrah — Wed, 16 Nov 2011 23:37:38 GMT

Thanks that solves the current issue, its a pain to keep an eye on that each time, if you have other PANs. Palo Alto should release a fix monitors and fixes the main issue directly without people intervention.

Re: Anyone having issues with PAN OS 4.0.7

jcostello — Thu, 17 Nov 2011 03:05:43 GMT

I have had several clients upgrade to 4.0.7 and have not heard of any issues so far, but they have each been up for less than a week.

as a side note, 4.1 contains a monitor pop up that shows the jobs on the firewall, so you won't have to go to the CLI to check downloads.

A work around for the stuck jobs is to set a timeout on your dynamic updates to about 3 hours.

Correction Threshold is actually a setting for delaying when an update will be installed. I apologize for any confusion I may have caused.

Though a setting like that would be really awesome - please hit up your Sales Engineer if you agree.

James

Re: Anyone having issues with PAN OS 4.0.7

zajilioss — Thu, 17 Nov 2011 13:46:23 GMT

4.0.7 is running very smoothly on our network. We had some seroius issues in HA environment on our serverfarm network but this got resolved after upgrading to 4.0.7

Regards

Re: Anyone having issues with PAN OS 4.0.7

wayne_webner — Mon, 21 Nov 2011 15:36:44 GMT

Im recanting my previous statement, after only one week of stability we experienced the dataplan resetting itself. We never had this problem previously .. its new since 4.0.7 and i believe some other customers have experienced the same issue as me.

Re: Anyone having issues with PAN OS 4.0.7

mharding — Mon, 21 Nov 2011 15:57:45 GMT

Yep. Had the same issue last week.

We have a HA pair, so it really wasn't a problem.

Re: Anyone having issues with PAN OS 4.0.7

opiedrah — Mon, 21 Nov 2011 22:23:14 GMT

Thought they said that 4.0.7 fixed the databack plane reset issues? Could it be its still not fixed?

Re: Anyone having issues with PAN OS 4.0.7

wayne_webner — Mon, 21 Nov 2011 22:40:31 GMT

correct although i believe a new bug is open so possibly a separate issue albeit same net result experienced.

Re: Anyone having issues with PAN OS 4.0.7

cfpa — Wed, 30 Nov 2011 07:52:20 GMT

Hi,

we are using a PA 4.0.5 cluster here (nearly no traffic utilization and only a minimum feature set is in use) and are facing following issues atm:

- Commits to the device are super slow and fail from time to time, doing the commit a second time magically works (but is still super slow)

- The UI is super slow

Afaik, we do not face any dataplane restarts. At least we did not notice them.

Should we upgrade to 4.0.7 or wait for 4.0.8 ?

Many thanks,

Christian

Re: Anyone having issues with PAN OS 4.0.7

opiedrah — Wed, 30 Nov 2011 17:32:29 GMT

From conversations with our SE, they highly suggest upgradging to 4.0.7, its their most stable version of the 4.0.x bunch, one of the good things coming up in 4.0.8 is that darn stuck update jobs. It is suppose to be fixed in that release, but really who knows, one can only hope 😕