topic Re: Most Stable Release for PA500 Cluster in General Topics

Most Stable Release for PA500 Cluster

licenselu — Fri, 14 Oct 2011 10:46:31 GMT

Hello,

What's the most stable release for a cluster (active/passive) of PA500 running IPS, AV and URL filtering ?

Regards,

Hedi

Re: Most Stable Release for PA500 Cluster

gswcowboy — Fri, 14 Oct 2011 13:35:41 GMT

IMO and my opinion only, I'd say 3.1.10 and 4.0.5 respectively.

Regards,

Renato

Re: Most Stable Release for PA500 Cluster

ggarrison — Fri, 14 Oct 2011 14:06:21 GMT

I would concur with Renato's recommendation for 3.1.10 or 4.0.5 currently.

Re: Most Stable Release for PA500 Cluster

jleung — Mon, 17 Oct 2011 05:53:29 GMT

Hi,

Definitely 3.1.10 if you don't need 4.0.x new features, otherwise 4.0.5.

Regards,

Jones

Re: Most Stable Release for PA500 Cluster

licenselu — Tue, 18 Oct 2011 09:10:36 GMT

Hi all,

First, thanks a lot for your input.

I will move to 4.0.5 (running like a charm in my lab on standalone device) because new features set.

I have another question.

Is is required to run the same sofware version on both members of the cluster.

The idea here is avoiding installing instable software on both members.

In case of problem, I can easily come back to the old version (failover).

Regards,

Hedi

Re: Most Stable Release for PA500 Cluster

gswcowboy — Tue, 18 Oct 2011 17:27:33 GMT

It's required. Otherwise, one will be in non-functional state.

Re: Most Stable Release for PA500 Cluster

licenselu — Wed, 19 Oct 2011 08:28:52 GMT

Hello,

First, thanks a lot your help.

Does this non-functionnal state occurs if we are upgrading in the same MAJOR release train (example from 4.0.3 to 4.0.5) ?

After reading the Document 'Upgrading HA pair from 3.1 to 4.0' is seems that it should not occur

'Were the upgrade taking place for a maintenance release, ie 3.1.6 to 3.1.7, the newly upgraded device would go to a passive state.'

Regards,

Hedi

Re: Most Stable Release for PA500 Cluster

gswcowboy — Wed, 19 Oct 2011 14:36:55 GMT

Hi,

This state is continuous if the ha cluster does not have matching panos versions(3.1.x and 4.0.x) even if you try to make the passive device functional. Not the same when you're upgrading from say 4.0.3 to 4.0.5. Assuming both have the same panos after an upgrade and the passive was once non-functional, making it functional will bring it back into passive state.

-Renato