topic Re: PANOS 7 on PA-2020 ? in General Topics

PANOS 7 on PA-2020 ?

dieter_b — Mon, 28 Sep 2015 13:44:33 GMT

Will it work ?

I don't mean like is it compatible.

I mean: Will it be manageable at all, seeing that version 6 is already a management nightmare ?

Is anyone on PA-2020/2050 on version 7 and what are the experiences ?

I see some changes that may be useful for alleviating management (eg Time-Based Log and
Report Deletion), but will it be enough ?

Re: PANOS 7 on PA-2020 ?

cpainchaud — Mon, 28 Sep 2015 14:49:33 GMT

IMO, pressure your sales to get good deal for a 3000 series replacement.

Re: PANOS 7 on PA-2020 ?

dieter_b — Mon, 28 Sep 2015 15:27:52 GMT

I'd like that, but such deal should be reasonable:

We paid licenses/support up front, still a few years to go. But the remaining time is not fully reïmbursed !

At the same time they want to sell us a new product (investment) - sure, with discount, but it's a more expensive product in the first place! -

AND

new licenses/support for a new 3-year contract (exploitation).

Given that, I'm sticking with the PA-2020 for now, at least until the contracts expire (2017). If by then PA makes me a reasonable offer (remaining licence/support value will not matter anymore), I'll consider it. If not, it's time to change vendor.

Re: PANOS 7 on PA-2020 ?

cpainchaud — Mon, 28 Sep 2015 15:30:36 GMT

I think you should insist, most customers around had great incentives to switch.

In the meantime I know no one with 20XX who switched to 7.0. I suspect there shall be little to no improvment there but I could be wrong

Re: PANOS 7 on PA-2020 ?

dieter_b — Tue, 29 Sep 2015 07:33:19 GMT

Trust me, I insisted...

The reseller can only do so much. In the end Palo Alto sets the terms.

Even our regional (Belgium) PA account manager wasn't able to go much further. Prices are set elsewhere (probably some dark office in the States 😛 ). I don't get companies who have a regional account manager who isn't allowed to change anything...

Re: PANOS 7 on PA-2020 ?

Hithead — Thu, 01 Oct 2015 07:31:53 GMT

Your best excuse for having a PA2000 series 🙂

Re: PANOS 7 on PA-2020 ?

jpeters — Fri, 02 Oct 2015 08:23:37 GMT

7.0.2 runs on a 2k, in fact I have seen an improvement in commit times.

Re: PANOS 7 on PA-2020 ?

dieter_b — Tue, 06 Oct 2015 08:19:13 GMT

How long have you had it running like that ?

Immediately after an upgrade (reboot), commit times are always better. Situation worsens with time.

Re: PANOS 7 on PA-2020 ?

sdolen — Tue, 06 Oct 2015 17:38:00 GMT

My 2050s are unmanageable after about a week of uptime on 6.1.5. Considering giving 7 a chance, could it get any worse???

We are stuck with our 2050s for at least a few more years, I may just have to roll back to 5x and take my chances. We can't afford to buy new firewalls every few years.

Re: PANOS 7 on PA-2020 ?

TomH — Tue, 06 Oct 2015 20:46:46 GMT

I have just upgraded my PA-2020 to 7.0.2. I was surprised!!! Management CPU hovering 'round 18% and commit times have dropped considerably.

However, it's been on 7.0.2 for only 2 days, so IMHO, the jury is still out.