topic Re: PAN-OS 5.0.7 Never again in General Topics

PAN-OS 5.0.7 Never again

soporteseguridad — Thu, 26 Sep 2013 13:17:20 GMT

Hi,

We upgraded our PA to PANOS 5.0.7 and the day after the users report several problems: accessing to internet, and the vpn client Global Protect wasnt working. We have done a revert to the version 5.0.5 and now its rowking propertly........

Anyone has had any of this problem with the release 5.0.7:

-Slow internet

-Any webs working and others web no

-Global protect vpn not working, and gateway web not available.

Thanks a lot

Re: PAN-OS 5.0.7 Never again

Retired Member — Thu, 26 Sep 2013 13:20:32 GMT

5.0.7 has some known bugs so I advice 5.0.6

Re: PAN-OS 5.0.7 Never again

soporteseguridad — Thu, 26 Sep 2013 13:28:39 GMT

there is any PANOS version without bugs???? In 5.0.3 dataplane restarts suddenly.....In 5.0.7 PA goes crazy..........

thanks

Re: PAN-OS 5.0.7 Never again

ericgearhart — Thu, 26 Sep 2013 13:31:43 GMT

soporteseguridad: Nope! There isn't a PANOS version release without bugs. PA really needs to up the ante on their QA department. All these features should be going through regular stress testing before a release.

We've learned the hard way to wait until a .10 release is out before trying to move to it. We're waiting for 5.0.10 to come out before we even consider moving production workloads to it.

PANOS 4.1.13 has been stable for us though.

Re: PAN-OS 5.0.7 Never again

soporteseguridad — Thu, 26 Sep 2013 13:49:57 GMT

So what its your advice......back to 5.0.5 or 5.0.6?

thanks

Re: PAN-OS 5.0.7 Never again

Retired Member — Thu, 26 Sep 2013 13:52:48 GMT

if you don't have multivsys and you don't use SNMPv3 5.0.6 is ok

Re: PAN-OS 5.0.7 Never again

ericgearhart — Thu, 26 Sep 2013 14:08:44 GMT

panos you've had issues with SNMPv3 on 5.0.7? Really?

I'm waiting on Zabbix 2.2 to be released which supports AES/SHA for SNMPv3, but that's yet another gotcha! Again, QA. Come on.

Re: PAN-OS 5.0.7 Never again

Retired Member — Thu, 26 Sep 2013 14:10:47 GMT

No I don't have issues.There is support's official bug with snmpv3

it did not hit you maybe that is normal

Re: PAN-OS 5.0.7 Never again

ericgearhart — Thu, 26 Sep 2013 14:12:52 GMT

It didn't hit me because I'm not doing v3 yet, I was just planning on doing it in the near future 😕

Re: PAN-OS 5.0.7 Never again

Retired Member — Thu, 26 Sep 2013 14:16:50 GMT

I think 5.0.8 will come soon.

Re: PAN-OS 5.0.7 Never again

ericgearhart — Thu, 26 Sep 2013 14:31:54 GMT

Sweet, then we're only 2 releases away from 5.0.10, which is the magic revision that seems to finally have all the new features in a major rev ironed out :smileylaugh:

Re: PAN-OS 5.0.7 Never again

licenselu — Fri, 27 Sep 2013 16:37:10 GMT

Hello,

An active cluster (PA500) running 5.0.7 goes "offline" this afternoon.

- Some webs sites working and others no

- HTTPS traffic was blocked to all financial web site.

After failover, everything was OK

Rollback to 5.0.6.

Regards,

Re: PAN-OS 5.0.7 Never again

nextgenhappines — Sat, 28 Sep 2013 14:55:45 GMT

Did you have a chance to check against the dataplane pool statistics?

Re: Decryption problem with 5.0.7 Read the the post by shasnain

Re: PAN-OS 5.0.7 Never again

nextgenhappines — Sat, 28 Sep 2013 14:58:02 GMT

Agree about the QA issues. We used 5.0 since day1 and we must have at least one bug that force us to upgrade to the next release.

Re: PAN-OS 5.0.7 Never again

_slv_ — Sat, 05 Oct 2013 12:17:54 GMT

PAN OS 5.0.8 went out on 2013/10/01 - somebody try it on non-test environment?

Re: PAN-OS 5.0.7 Never again

Retired Member — Sat, 05 Oct 2013 19:41:06 GMT

we are already using in 2 seperate production environment.There maybe some issues(bugs) but we have not seen anything for 4 days.

Re: PAN-OS 5.0.7 Never again

eoop — Mon, 07 Oct 2013 12:23:23 GMT

@panos, could you please telle me what is the issue in 5.0.6 with multiple vsys?

Re: PAN-OS 5.0.7 Never again

Retired Member — Mon, 07 Oct 2013 12:36:38 GMT

DNS across multiple vsys is broken ->fixed in 5.0.6 h3

I was told that but I did not have issue with this because did not use 5.0.6 much

just jumped to 7 and 8 after....

Re: PAN-OS 5.0.7 Never again

eoop — Mon, 07 Oct 2013 13:51:20 GMT

Thanks for the answer, i was just testing 5.0.8, and it is not better than the other buggy versions, since i rebooted my panorama, i lost some configurations (device groups, templates...). These parts of configurations was present in the XML configuration file, but not present in the configurations displayed in the GUI, the downgrade to 5.0.5 fixed the issue :smileyshocked:

Re: PAN-OS 5.0.7 Never again

Retired Member — Mon, 07 Oct 2013 13:58:42 GMT

That seems very bad...I was thinking of an upgrade for panorama with some devices in another prod.