topic Need Upgrade Tips in General Topics

Need Upgrade Tips

johnde — Sat, 18 Apr 2020 14:00:31 GMT

I am planning to upgrade Panorama and my few HA clusters to version 9.0.6. Currently all these are on 9.0.3-h3.

Need your experience on 9.0.6 if anyone is already running on it. Is there any unknown issue/bug observed on this version?

I have completely aware of known issues but just wanted to check if anyone observed any bug on this version and created any kind of issues, please share your recommendations.

Re: Need Upgrade Tips

nextgenhappines — Sat, 18 Apr 2020 16:10:33 GMT

just my 2 cents,

9.0.8 just got released on April.16. Also, Palo Alto Networks Security Advisories listed number of security related issues are addressed 9.0.7 and later.

There is a known bug PAN-131792 when I tested in 9.0.6, target fix is 9.0.9. webUI cannot build monitor traffic log filter via policies -> security -> rule -> right click -> Log Viewer.

Re: Need Upgrade Tips

SutareMayur — Sat, 18 Apr 2020 18:09:10 GMT

@johnde,

Not me but one of my friend had faced issues for GlobalProtect when moved to 9.0.6 version. Client were getting certificate related error post upgrade. This is what my friend told me about the issue that he observed in his environment. He had to upgrade to 9.0.7 and post that everything was normal. May be he had opened case with Support and TAC engineer suggested to upgarde to 9.0.7. Not have any more details on this. But this is what i heard about 9.0.6.

Mayur

Re: Need Upgrade Tips

BPry — Sun, 19 Apr 2020 04:55:43 GMT

@johnde,

I would definitely go with the current recommended release of 9.0.7 since it addresses a number of issues present in 9.0.6 and fixes PAN-SA-2020-0002, CVE-2020-1990, and CVE-2020-1992 (Only applicable to PA-7000).

Re: Need Upgrade Tips

johnde — Sun, 19 Apr 2020 05:56:49 GMT

@nextgenhappines @SutareMayur @BPry ,

Thank you guys, this is really helpful for me to decide my further actions. And this is what i like about Live community. All're here to share & care about technical issues, discussions etc.

Appreciate everyone's help here.

-John