topic Re: PANOS 6.0.2 release date in General Topics

PANOS 6.0.2 release date

RudolfTorvenyi — Thu, 24 Apr 2014 14:02:49 GMT

hello,

is there a confirmed release date of PANOS 6.0.2? A month ago I had a case open, where the support guy has told me that the expected release date is arount the 21th of April. Today is the 24th and still nothing

thanks

Rudolf

Re: PANOS 6.0.2 release date

HULK — Thu, 24 Apr 2014 20:53:56 GMT

It has been released today.

Thanks

Re: PANOS 6.0.2 release date

RudolfTorvenyi — Fri, 25 Apr 2014 05:28:58 GMT

thanks Hulk, great !

Re: PANOS 6.0.2 release date

_slv_ — Fri, 25 Apr 2014 17:04:31 GMT

Do You think that is a time to upgrade from 5.0.11 to 6.0.2?

Is all reported to community bugs fixed in 6.0.2?

Regards

Slawek

Re: PANOS 6.0.2 release date

ericgearhart — Fri, 25 Apr 2014 17:39:23 GMT

Judging by the huge number of fixes in 6.0.2 we'll be waiting for a couple more revs of 6.0 before we move anything production that actually moves traffic to it...

See PAN-OS 6.0.2: Addressed Issues for what I mean... that's a boatload of issues

Re: PANOS 6.0.2 release date

RudolfTorvenyi — Fri, 25 Apr 2014 18:11:22 GMT

I have already made the upgrade to 6.0.2 on my customer FW.

It seems to work 🙂

Re: PANOS 6.0.2 release date

pulukas — Sun, 27 Apr 2014 17:47:31 GMT

I agree with ericgearhart, for the jump from 4 to 5 we waited until the 5.0.6 release. There does seem to be a much better QA process for regression testing and I do hear all the PA technical support contacts saying and doing the right things. So this time we may be ready to make the transition at 6.0.4.

But the listing of three ftp bugs fixed in the 6.0.2 release linked above demonstrates that regression testing is not quite where it needs to be for major code train releases just yet.

Re: PANOS 6.0.2 release date

_slv_ — Mon, 28 Apr 2014 07:28:52 GMT

Take a look into date of released late 5.0.x versions. Early version started to lunch every months - now they need two months for versions. Maybe this will give us better product.

I switched to 6.0.2 this weekend, One issue was with FreeRadius. After I upgraded to 6.0.2 Captive Portal stopped authorising users. I had to restart radius process. Until now 6.0.2 seems to be a "good version".

I still have app-override for VoIP, maybe this week I will try to disable app-override and test my VoIP connections. Accrding to support engineer 6.x PAN should properly wor with VoIP (problems discussed Re: VoIP Traffic, strange behavior, need help to understand please.).

Regards

Slawek

Re: PANOS 6.0.2 release date

arvesynd — Mon, 28 Apr 2014 08:18:13 GMT

Has anyone upgraded a HA cluster to 6.0.2?

I've installed the upgrade on the passive node, and now I'm seeing "non-functional (Peer version not compatible)" on this firewall.

I've set "session tcp-reject-non-syn no" on both firewalls as suggested by the release notes, and I'm ready to suspend the active firewall, but I would like to know if this will cause traffic to stop when trying to fail over to this node.

Re: PANOS 6.0.2 release date

reaper — Mon, 28 Apr 2014 08:30:52 GMT

hi as-mg

upgrading between minor versions should cause the state table to still be synced between the nodes so traffic can keep flowing when you fail over. between major versions prior to 6.0 this was not possible hence the addition of setting tcp-reject-non-syn no to allow "broken" sessions to continue flowing as this setting removes the need for a proper tcp handshake to establish sessions.

a good check to run before failing over is "show high-availability state" and "show sessions all"

if your state table has been populated (in case of minor upgrade) you're good to go

in case of a major upgrade you'll want to take a little more care as the state table is not synchronized and there could potentially be drops if reject-tcp-non-syn has not been disabled

Re: PANOS 6.0.2 release date

mattc — Mon, 28 Apr 2014 09:50:24 GMT

HI,

Yes I have upgraded a live cluster. This worked fine with no issues and packet loss.

Thanks

Re: PANOS 6.0.2 release date

Hithead — Fri, 09 May 2014 14:10:37 GMT

hi just installed PANOS 6.0.2 on a PA2020...

the MGT CPU increased after the update (80 -90 % continuous). Will monitor that over the weekend.

Re: PANOS 6.0.2 release date

Retired Member — Fri, 09 May 2014 14:16:29 GMT

I didn't see anything unusual with our 2050 ( about mng cpu ) .just to inform.

Re: PANOS 6.0.2 release date

Hithead — Wed, 21 May 2014 07:12:58 GMT

hi, you are right. the mgt cpu is ok. was just a peak...