topic Re: Recommended PANOS version in General Topics

Recommended PANOS version

dennislee — Tue, 04 Apr 2017 01:54:57 GMT

Hi Guys,

I would like to know if there's any resources that provide information about what recommended versions of PANOS to be upgraded to or from? Also, what caveats one might face during the upgrade process?

Thank you,

Dennis

Re: Recommended PANOS version

reaper — Tue, 04 Apr 2017 08:39:30 GMT

Hi Dennis

There's a 'best practices' for PAN-OS upgrades : Best Practices for PAN-OS Upgrade

For a recommended version it's probably best you come and check here the moment you need advise as the recommended versions tend to change over time as new maintenance release versions become available

currently we recommend : 6.1.16 , 7.0.14 and 7.1.8 (8.0 is still a little too young to be 'recommended')

but please always review the release notes before upgrading as specific conditions may apply

Re: Recommended PANOS version

dennislee — Tue, 04 Apr 2017 22:03:20 GMT

Thanks, Reaper!

In my situation, we are likely to have newer PA firewalls that runs on PANOS 8.

Would you still suggest that I upgrade my Panorama from 7.0.6 to version 8 so i am able to manage newer firewalls running 8 and at the same time managing older firewalls that is likely to be upgarded to 7.1.8?

Would there be any compatibility issues having Pano 8 managing Panos 7.1.8?

Please kindly advise, thank you.

Cheers,

Dennis

Re: Recommended PANOS version

bradk14 — Tue, 04 Apr 2017 22:19:32 GMT

should be no issues using a higher version of Panorama than the firewall. if anything, you should benefit from it.

regardless, keep in mind the advisory that PA posted here earlier, that the Panorama certificate in most prior versions is expiring in June and that will be detrimental to monitoring and administrating firewalls through Panorama. So you will need to upgrade soon regardless, either to 8 or at least 7.0.15, if not 7.1.9

https://live.paloaltonetworks.com/t5/General-Topics/Panorama-Certificate-Expiration-on-June-16-2017/m-p/150948#U150948

Re: Recommended PANOS version

reaper — Wed, 05 Apr 2017 10:26:00 GMT

you'll need to upgrade panorama to be on par with the latest OS isntalled on your firewalls. Panorama can manage anyting running it's own major version and 2 lower, but not firewalls running newer versions