topic Re: What version is the best to decrypt and encrypt 6.1.x vs 7.0.x in General Topics

What version is the best to decrypt and encrypt 6.1.x vs 7.0.x

Apadilla — Wed, 17 Feb 2016 21:26:31 GMT

Hello

I need your feedback about what version in PANOS is the best to decrypt and encrypt ?.

6.1.x vs 7.0.x

Best regards

Re: What version is the best to decrypt and encrypt 6.1.x vs 7.0.x

Lucky — Wed, 17 Feb 2016 21:35:23 GMT

Hi,

from the top of my had with so little inflrmation I would say always go for the last / highest version available, unless you have really good reason not to use it?

Best regards,

Luciano

Re: What version is the best to decrypt and encrypt 6.1.x vs 7.0.x

Apadilla — Wed, 17 Feb 2016 21:45:06 GMT

Currently I have the version 6.1.4, but I want to upgrade to 7.0.5. I readed in one forum that version 6.1 is much better that 7.0. So I appreciate your feedback with this.

Best regards

Re: What version is the best to decrypt and encrypt 6.1.x vs 7.0.x

vkalal — Wed, 17 Feb 2016 21:50:28 GMT

7.0.5 is a fresh release so there is no verdict yet on it's stablity

Re: What version is the best to decrypt and encrypt 6.1.x vs 7.0.x

Lucky — Wed, 17 Feb 2016 22:30:56 GMT

There were feature enhancements in 7.0 and additional ciphers were added, it is worth checking. There are no reports on instability of 7.0.5 either, it is just a fresh version 🙂

Re: What version is the best to decrypt and encrypt 6.1.x vs 7.0.x

pankaku — Thu, 18 Feb 2016 00:55:59 GMT

7.x series supports more cipher suites for decryption. There are chances when firewall is not able to decrypt traffic because of unspported cipher suites. Check the following document. 7.0.4 is better then previous version.

https://live.paloaltonetworks.com/t5/Management-Articles/SSL-Decryption-Not-Working-due-to-Unsupported-Cipher-Suites/ta-p/55543

Re: What version is the best to decrypt and encrypt 6.1.x vs 7.0.x

Brandon_Wertz — Fri, 19 Feb 2016 14:18:22 GMT

From what I recalled there are only 2 additional ciphers that version 7.0.X software is capable of processing over version 6.1.X software.

When version 7.1.X software comes out there's projected to be many many more supported cipher suites. The instability you're alluding to was in PAN-OS software 7.0.3 and <. Version 7.0.4 is far more stable, especially WTR to SSL.