topic Re: Recommended Software release in General Topics

Recommended Software release

micahacruz — Wed, 10 Jan 2018 07:16:27 GMT

Hi PAN Community!

I'm just wondering if there's a dedicated page/link I can refer to if I want to confirm if a certain release is recommended or not. I don't want to raise a TAC case everytime. Thanks!

Re: Recommended Software release

kiwi — Wed, 10 Jan 2018 08:06:14 GMT

Hi @micahacruz,

You can also raise your question here :

Today's recommended releases per branch :

For PAN-OS

6.1.18

7.1.14

8.0.6

For Panorama on VM / VM-100 / VM-500

6.1.18

7.1.14

8.0.6

WF-500

7.1.14

6.1.18

Traps

4.1.2

4.0.4

3.4.4

GlobalProtect

4.0.4

3.1.6

UID

8.0.4

7.0.8

6.0.9

Cheers !

-Kiwi

Re: Recommended Software release

pulukas — Sat, 13 Jan 2018 15:50:45 GMT

I'll second the request that TAC maintain a permanent kb type page with the current recommended releases. This is helpful for upgrade planning.

Re: Recommended Software release

BPry — Sat, 13 Jan 2018 18:39:22 GMT

I'll third this request.

While I have a lab enviroment where I can properly test all software releases and verify they'll work for us, I know that many users don't. Having a simple webpage to refer to, or even a little symbol on the 'software' page on the support webpage would be a much better user experiance than having to contact TAC simply to get the recommended software release.

Re: Recommended Software release

micahacruz — Sat, 13 Jan 2018 19:48:47 GMT

My experience with PAN community is amazing so far, but it will be less time consuming if they'll make it available to the public.

Re: Recommended Software release

jdprovine — Wed, 17 Jan 2018 13:47:13 GMT

@kiwi

I am currently on the globalprotect client version 4.0, and am planning to move to some version of 8.0 this summer. 1. will I have any issues with 4.0 2. Are there any lower version of GP that will not work with 8.0? I still have some users that are on some versions of 2.0 they so far are unwilling to upgrade

Re: Recommended Software release

BPry — Wed, 17 Jan 2018 14:20:44 GMT

@jdprovine,

Currently the minimum supported version of the GlobalProtect Agent when using PAN-OS 8.0 is 4.0.0.

Re: Recommended Software release

jdprovine — Wed, 17 Jan 2018 14:23:18 GMT

@BPry

Well that might be how I get the rest of the users to upgrade to 4.0 LOL upgrade to 8

Re: Recommended Software release

BPry — Wed, 17 Jan 2018 14:25:06 GMT

@jdprovine,

I honestly wouldn't be too surprised if it still functioned even after the upgrade. It definitely wouldn't be supported however, and any issues that you report the response from TAC would simply be 'upgrade'.

Re: Recommended Software release

OtakarKlier — Wed, 17 Jan 2018 14:59:59 GMT

Hello @micahacruz,

Another thing to consider is what fixes and known vulnerabilities exist in the current version youare running and what version ou plan on going to. I highly recommend reading the release notes, they are pretty thorough as compared to other companies release notes.

For my company, we have a 30 day remediation requirement for any known vulnerabilities. Right now we are on the latest 8.0.x and dont seem to have any issues.

Cheers!

Re: Recommended Software release

jdprovine — Wed, 17 Jan 2018 19:59:44 GMT

@BPry

Yes I have gotten that answer before from TAC. I did do some testing on my own and found that some versions of GP have had a dramatic security changes and did not work with the newer versions of the OS's

Re: Recommended Software release

mans-paloalto-support — Wed, 23 May 2018 20:42:19 GMT

Was this ever truly solved with a page with recommended software releases? What are the recommended releases as of today (5/23/18)?

Re: Recommended Software release

BPry — Wed, 23 May 2018 20:49:15 GMT

@mans-paloalto-support,

Nope. You either contact us and we can let you know what was last reported by one of the community members or what we last recieved from TAC ourselves.

PAN-OS 8.1.1 - This is not recommended, meaning you shouldn't be running it in production. If you must have the latest and greatest, run 8.1.1.

PAN-OS 8.0.9

PAN-OS 7.1.16

PAN-OS 6.1.20 (You should be upgrading, support runs out shortly).

Re: Recommended Software release

mans-paloalto-support — Sat, 16 Jun 2018 23:22:41 GMT

Please update with the current set of recommended OS versions.

Re: Recommended Software release

BPry — Sun, 17 Jun 2018 04:47:13 GMT

@mans-paloalto-support,

PAN-OS 8.1.2 - This is not recommened, meaning you shouldn't be running it in production. If you must have the latest and greatest run 8.1.2 so you get the latest bug fixes with 8.1

PAN-OS 8.0.9 - 8.0.10 is released but has not yet entered recommended status

PAN-OS 7.1.17

PAN-OS 6.1.20 ( You should be upgrading)

As you can see the recommended releases really hasn't changed; 8.1.* still does't have a recommended release and 8.0.10 is too new to actually get recommended status, although I haven't heard of anyone running into any issues with it.

Re: Recommended Software release

pulukas — Sun, 17 Jun 2018 12:09:38 GMT

Is there consideration being given to creating a standing kb article of current recommended releases by platform?

With a commitment to valid and update monthly or quarterly.

Re: Recommended Software release

BPry — Sun, 17 Jun 2018 23:47:40 GMT

@pulukas,

I actually spoke to a few people at Ignite this year that are higher up in the chain ( in support ) and none of them really gave me a clear answer to why this hasn't been done already, outside of external KB articles and simply incorporating this into the actual support page. WIth the support page getting a refresh this would have been the perfect time to implement something like a 'Gold Star' recommended release icon similar to Cisco or other vendors.

The best that I could understand is that PA doesn't really like saying that any one software release is truly 'recommended' as any software release really depends on the features that you are using on the firewall (which is 100% true); the general consensus was that customers should be able to ask their SE and they could recommend a release for the customer's particular environment. Sadly, that really isn't the case for most customers and I would say that the majority of the SEs assigned to people don't really have a full understanding of what their configuration looks like and what features that particular customer is using. It makes for a really nice idea that simply breaks down when you get too the real world.

Re: Recommended Software release

pulukas — Mon, 18 Jun 2018 10:00:48 GMT

Thanks for pushing on this issue. This really is an industry standard now to have such a recommendation based on support activity. And making customer hunt for the right information does not help your reputation as a company at all.

As you note, we live in the real world. Where newly released software has bugs and needs to be road tested by those who truely really need those new features while the rest of us follow when the bugs are crushed.

Re: Recommended Software release

Quinn — Fri, 22 Jun 2018 18:41:05 GMT

Found this page searching for the same answer. I presume that the list below is no longer accurate. Can we please get this to a maintained KB article (with revision history would be great too).

Re: Recommended Software release

BPry — Fri, 22 Jun 2018 18:43:12 GMT

@Quinn,

This list

PAN-OS 8.1.2 - This is not recommened, meaning you shouldn't be running it in production. If you must have the latest and greatest run 8.1.2 so you get the latest bug fixes with 8.1

PAN-OS 8.0.9 - 8.0.10 is released but has not yet entered recommended status

PAN-OS 7.1.17

PAN-OS 6.1.20 ( You should be upgrading)

Cause yup this would still be current unless 8.0.10 has actually moved into a recommended status, but I haven't heard anything on that yet.