L2 Linker


so the long-awaited v5 is now available.  What are the implications of upgrading to it?

  • is rollback to v4 straightforward (we're on 4.1.8 now)?
  • does it force you to use the new PAN web-filtering database, or can you continue to use Brightcloud?
  • Do we need to make changes to our rulebase (in particular WRT to the changes in the way app dependencies work in v5)?

I don't particularly want to be a guinea-pig, but I am keen to see what improvements have been made.

Tags (1)
L5 Sessionator

Re: PAN-OS 5

As far as URL filtering goes, the 5.0 release simply gives you the option of using PAN-DB for URL filtering instead of BrightCloud; you are not forced to use either.  BrightCloud is and will be fully supported, so you may continue to use and purchase licenses for it.

L2 Linker

Re: PAN-OS 5

I was told by support a couple of times that site-to-site VPN Proxy ID capacity would be increased from 10 to 250 IDs per tunnel interface.  As well as support for Google safe image search.  Has this been verified by anyone?

L5 Sessionator

Re: PAN-OS 5

Regarding app dependencies in rulebase, you can upgrade from 4.1.8 to 5.0.0 fine as any explicit allow rules that you already have for app dependencies will continue to work as it did before. So there should be no modifications needed there. Regarding proxy-id limits increased, this has been increased from max of 10 to 250 for all platforms except for PA-200. PA-200 will support up to 25 proxy-ids.

Regarding Google safe image support, please contact your Palo Alto Networks sales rep for information about upcoming new features.


Not applicable

Re: PAN-OS 5

What are the benefits of PAN URL-DB over BrightCloud to your customers?

Kind regards & Thanks.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!