topic Re: Upgrade to 7.1.4 OS , Any specific issue in General Topics

Upgrade to 7.1.4 OS , Any specific issue

fatboy1607 — Tue, 30 Aug 2016 07:25:37 GMT

We are Planning to upgrade our firewall from 6.1.10 to 7.1.4 , has anyone faced any specific issue with 7.1.4 ?

Thanks in Advance.

Re: Upgrade to 7.1.4 OS , Any specific issue

TranceforLife — Tue, 30 Aug 2016 08:09:56 GMT

Hi,

l would go for 7.1.4-H2 as it has a hot fixes/issues that have been reported in 7.1.4.

Issues fixed in the 7.1.4:

99934 Fixed an issue where Panorama did not correctly verify Device group objects when pushing configurations with a large number of objects to firewalls, which caused commit failures with object validation errors.

99117 Fixed an issue where PA‐7080 firewalls failed to reach maximum session capacity.

97601 Fixed an issue on firewalls where dataplane CPU usage became excessive.

Re: Upgrade to 7.1.4 OS , Any specific issue

BPry — Tue, 30 Aug 2016 12:21:10 GMT

I'm just wondering why you have decided to go with 7.1.4 instead of a generally more reliable 7.0.*. Depending on what you are doing I would actually suggest sticking with 7.0.* instead of making a jump to 7.1.* just because it seems that nobody is really in consensus on what build of 7.1 is actually the most stable; which seeing as there are/were issues that were dependant on the platform.

Re: Upgrade to 7.1.4 OS , Any specific issue

Brandon_Wertz — Wed, 31 Aug 2016 14:13:34 GMT

There are considerable TLS supportability features in 7.1.X, commit enhancements, as well as major changes to "Dynamic Blocks Lists" that are now External Dynamic Lists. All things I want to encorporate into my company, but as you've pointed out, doesn't really seem stable yet and I'm not going to it.

Hopefully 7.1.5 will make the cut.

Re: Upgrade to 7.1.4 OS , Any specific issue

fatboy1607 — Wed, 21 Sep 2016 06:27:00 GMT

Thanks , 7.1.4-H2 running stable for you ?

Re: Upgrade to 7.1.4 OS , Any specific issue

OtakarKlier — Wed, 21 Sep 2016 21:31:31 GMT

Hello,

From what I have seen are more glitches than performance impacting bugs. I have not opened cases on any of hte issues I ahve seen as they are more annoyances rather than performance impacting.

Some of my reports no longer function correctly, they are blank.

We have 'Enable Web Alarm Notifications' enabled and now when youy acknoiwledge them, they dont go away automatcially, you have to click the 'Close' button.

User-id, while its pretty stable, we have seen it drop off a bit and we had to open a case on it. But it seems that its pretty good.

Over all I would say that its been working for us.

Regards,

Re: Upgrade to 7.1.4 OS , Any specific issue

OtakarKlier — Fri, 23 Sep 2016 16:17:09 GMT

And now looks like the user-id issues are cropping up for us...I have a case with tac...

Betreff: Upgrade to 7.1.4 OS , Any specific issue

kdd — Wed, 28 Sep 2016 11:28:57 GMT

Hi,

since we upgraded to 7.1.4 (we came from 6.0.4) we made good experiences. The reason why we upgraded was that the supported ciphers include DHE and ECDHE as well. But keep in mind the DHE and ECDHE algorithms are only supported for SSL Forward Proxy. Minor problems we noticed with custom reports.

Re: Upgrade to 7.1.4 OS , Any specific issue

MangoTango — Wed, 28 Sep 2016 17:09:45 GMT

7.14-H2 is most stable version on 7.1.X train, but there are reports of dataplane crashes. ( We experienced issues with the mgmt -server crashing in 7.1.3). I'd say 7.0.7 is your most stable and trusted on the 7.0 train, 7.0.10 is an option, if you're feeling frisky since it hasn't been in the wild so long.

Re: Upgrade to 7.1.4 OS , Any specific issue

mtijhoff — Wed, 19 Oct 2016 09:20:40 GMT

@OtakarKlier wrote:
And now looks like the user-id issues are cropping up for us...I have a case with tac...

We are also having trouble with user-id also. Is there any update on this, i did not found anything related to this in the release notes, except for one topic on this forum about a change in the default timeout settings (https://live.paloaltonetworks.com/t5/General-Topics/XML-API-user-id-timeouts-is-there-a-configurable-global-setting/m-p/119120/)

Re: Upgrade to 7.1.4 OS , Any specific issue

OtakarKlier — Wed, 19 Oct 2016 15:55:36 GMT

So unfortunatly tech supprot didnt have a compelte answer as to why the system was randomly dropping a user here and there. While we dont have many user-id based policies, it becomes a pain when a p[articular user dose get dropped :(. We are letting 7.1.5 bake in the wild, once we feel comfortable with it, we'll go to it and see if we still have similar issues.