PAN-OS Versions and Release Notes

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Community Team Member

It is always hard to stay on top of new software versions, and in some cases, you might not even want to upgrade to the freshest and latest releases until you know it's stable enough to perform the tasks necessary. 

 

That said, I wouldn't recommend staying on a so-called stable version until it's no longer supported. In addition to no longer being supported, you'll be missing out on a lot of new features and functionalities provided by a newer PAN-OS version.  

 

To put this into perspective, I'll discuss a topic from not too long ago that was covered right here on the Live Community. One of our users was experiencing a specific issue which resulted in some commit failures:

 

2018-01-24_11-07-11.jpg

 

 

 

The discussion went on and got plenty of replies from other users trying to help out. From checking the job-IDs on both Panorama and the actual firewall experiencing the issue to checking the ms.log logfile for more details as to what might be causing the commit to fail. The log in question was showing some memory allocation issues causing the commit to fail:

 

 

2018-01-17 11:17:45.144 +0100 Error: pan_sys_system_int(pan_sys.c:563): fork() failed! errno=12 (Cannot allocate memory)
2018-01-17 11:17:45.144 +0100 Error: pan_sys_system_int(pan_sys.c:563): fork() failed! errno=12 (Cannot allocate memory)

 

 

Luckily, the user was using a supported version (PAN-OS 8.0.3)! However, the version was rather old (6 months old at the time of posting) and a few newer versions were already released in the meantime. In that case, it might be a good idea to check the release notes on some of the newer PAN-OS versions, and check for any issues that might be related to this behaviour.

 

Release notes can be found on our Support Portal @ https://support.paloaltonetworks.com/Support/Index .  All you need to do to find them is log into the Support Portal using your Support Account and navigate to the Software Updates page as displayed below:

 

login support.jpg

 

 

 

 

 

Some of the more recent release notes did have information on addressed issues that might be related to the topic at hand. 

 

Check out the actual discussion to get all the details: Failed commiting config from Panorama

 

Sure enough, there's no guarantee that the upgrade will fix the behaviour, and you might want to check with TAC first in order to confirm wether you are hitting this exact same issue.  Also, there might be a reason why you don't want to upgrade to the latest PAN-OS version and you are simply looking for a workaround until you are sure that an actual upgrade is safe. 

 

Certainly with memory related issues, restarting a specific service might be a valid workaround for you. For other issues, further debugging or more creative solutions might offer a workaround.  In such cases, I would recommend reaching out to TAC as they might have seen similar requests, or post your question right here on the Live Community discussion board where both users and Palo Alto Networks employees might have useful information for you!

 

As always, comments and questions are welcome in the comment section below!

 

-Kiwi out!

7 Comments
L2 Linker

This would be very useful to have in a searchable bug database (requiring login of course). It's very cumbersome having to look through all the release notes when having an issue.

L4 Transporter

i always contact TAC for the recommended version from where I am upgrading, the response is pretty quick.  

L0 Member

Hi kiwi,

 

thanks for the infos!

 

Do you know, if there is a list of TAC recommended releases? Or how I can get in contact witch TAC, like jprovine mentioned?

 

Thanks a lot,

 

best regards

 

Steve

Community Team Member

Hi @Stefan-Mueller,

 

I don't think there's a public list for TAC recommended releases (yet).

 

Fastest way to get your answer would be to post your question on the discussions forum from Live Community or reach out to TAC as you already mentioned.

 

TAC can be reached through one of the following phone numbers :

 

Support Phone Numbers

APAC: +65 3158 5600

Japan: 01 2018 4025

Australia: 1 800 002 378

Hong Kong: +86 400 639 9205

Saudi Arabia: 800844 0412 , 800850 0011

Taiwan: 080086833 , 080086882

 

Cheers !

-Kiwi.

L0 Member

I was thinking of making a software compliance tool, and it would be sweet if there was a way of querying current recomendations from PA.

I know other vendors expose this kind of information to partners 😉

L1 Bithead

Hi @kiwi,

 

Do you have any link/URL where we can get these information like recommended versions for current running version ?

 

Thanks,

Rajesh Maurya

  • 42427 Views
  • 7 comments
  • 3 Likes
Register or Sign-in
Labels
Top Liked Authors