topic Re: Upgrade to latest 7.0.x or 7.1.x? in General Topics

Upgrade to latest 7.0.x or 7.1.x?

iweltag — Wed, 21 Dec 2016 11:38:49 GMT

Hi,

we are planning to upgrade our 3020 A/P Cluster to latest PANOS (7.0.x or 7.1.x). Currently we are runing 6.1.13.

We want to do more SSL Decryption (Inbound & Forward Proxy). What are you thinking is the best and stable release for 3020 A/P Clusters and SSL Decryption?

Is there a official site where we can check the palo alto recommended releases?

Thank you.

Re: Upgrade to latest 7.0.x or 7.1.x?

TranceforLife — Wed, 21 Dec 2016 14:47:37 GMT

Hi,

No there is no officially recommended version, but you can check these 3 links:

7.1 better for decryption:

https://live.paloaltonetworks.com/t5/PAN-OS-7-1-Articles/PAN-OS-7-1-Supported-ciphers/ta-p/71969

Critical Issues Addressed in PAN-OS Releases

https://live.paloaltonetworks.com/t5/Management-Articles/Critical-Issues-Addressed-in-PAN-OS-Releases/ta-p/52882

Security Advisories:

https://securityadvisories.paloaltonetworks.com

Will give you a good understanding same as release notes.

Thx,

Myky

Re: Upgrade to latest 7.0.x or 7.1.x?

BPry — Wed, 21 Dec 2016 14:46:41 GMT

If you're main importance is decrypting the traffic go with 7.1 since that supports the most ciphers. Either release at this point has proven to be stable.

Re: Upgrade to latest 7.0.x or 7.1.x?

mlinsemier — Wed, 21 Dec 2016 17:48:15 GMT

We have had good luck with PAN-OS 7.1 as long as you are running 7.1.4-h1 or later. I would recommend going to 7.1.6 as we have been running it pretty much issue free in our environment.

Re: Upgrade to latest 7.0.x or 7.1.x?

iweltag — Thu, 22 Dec 2016 10:49:52 GMT

wow - thank you 🙂

Re: Upgrade to latest 7.0.x or 7.1.x?

santonic — Thu, 22 Dec 2016 11:04:00 GMT

Running 7.1.5 for a while now, no issues.

Re: Upgrade to latest 7.0.x or 7.1.x?

kiwi — Thu, 22 Dec 2016 12:15:43 GMT

Hi @iweltag,

Current recommended releases for each of these 2 branches are PAN-OS 7.0.11 and PAN-OS 7.1.6.

Cheers !

-Kim.

Re: Upgrade to latest 7.0.x or 7.1.x?

Brandon_Wertz — Thu, 22 Dec 2016 21:43:58 GMT

100% with what @TranceforLife posted.