PAN OS 8.1.5 - Thoughts?

Reply
Highlighted
L1 Bithead

PAN OS 8.1.5 - Thoughts?

Hi there! Has anybody had the chance to play with PAN OS 8.1.5 yet in Production? Are there any noticable issues? I've been locked into this killchain of bugs ever since we made the leap to 8.1.0, and I'm just wondering if this build will be the "stable" release.

Tags (2)
L7 Applicator

Re: PAN OS 8.1.5 - Thoughts?

@Fr4nk4,

Hasn't been out long enough to determine that at all. 

L3 Networker

Re: PAN OS 8.1.5 - Thoughts?

Hello

The palo alto TAC say the stable version for 8.1 is 8.1.3.  We will upgrade to 8.1.5 in the next days. In 8.1.5 fix a lot issue related with panorama M-series and VM. So also in this new release PA do not adding any new features. I hope this version is more stable that 8.1.3.

what kind of issues do you have with 8.1.x?

 

Best Regards

L1 Bithead

Re: PAN OS 8.1.5 - Thoughts?

Apadilla,

 

We've been having some really wierd issues with the Palo Alto on 8.1 code. I've seen issues with some application signatures breaking. One of them was RTP, which we use for our fax server. It should allow all of the dynamic UDP ports, but some ports were being blocked between the fax server and the call manager. This was on 8.1.3, and we've upgraded to 8.1.4 now.

 

We've had issues with the Globalprotect data file not updating. That was sorta fixed in 8.1.4. I'm still having issues with HIP check on Globalprotect, but it's random.

 

The main thing we're seing that is troublesome is, at random intervals Office 365 traffic will get denied on the firewall for no reason. We're using Minemeld to grab the list of updated IP's from Microsoft, and I compared those to an actual IP list from a powershell script that gets the IPs. I compared the 2 text files and they are identical, so I have no clue as to why traffic is getting blocked intermittently. 

 

Honestly, it feels like things get better every time we upgrade to a newer build, but it never feels as stable as  8.0 was. Have you upgraded to 8.1.5 yet? If so, have you noticed any issues?

L3 Networker

Re: PAN OS 8.1.5 - Thoughts?

Hello Fr4nk4

 

Not yet, This 12/12 We will proceed to upgrade one panorama to 8.1.5  and Thuerday one 3260 upgrade to 8.1.5. I hope to have good news for you. 

 

But I hope this release not show critical issues.


In this link you can see the critical issues fixed in each release

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm68CAC

 

Best Regards

Andres

 

 

L5 Sessionator

Re: PAN OS 8.1.5 - Thoughts?

Hey @Apadilla

 

That's interesting that TAC informed you that PAN-OS 8.1.3 was recommended, I know for a fact that PA-3200 series have internal path monitoring failures occurring on PAN-OS 8.1.3 which causes the dataplane to restart (fixed in 8.1.4). 

 

8.1.4 looks to be fairly recommended if you're not using Panorama from what I've seen. Otherwise, we'll see what 8.1.5 has to bring to the table with regards to stability since that does have a number of Panorama fixes as you mention.

 

Cheers,

Luke.

L7 Applicator

Re: PAN OS 8.1.5 - Thoughts?

@Apadilla,

Actually last I heard that's just straight wrong. 8.1.4 is the current recommended version of 8.1 if the software features or hardware make 8.1 a requirement. 

L5 Sessionator

Re: PAN OS 8.1.5 - Thoughts?

@BPry

 

Looks like we're in agreement ;)

L1 Bithead

Re: PAN OS 8.1.5 - Thoughts?

Looking at this confirms that I should stay on 8.0.x. Very helpful!

L0 Member

Re: PAN OS 8.1.5 - Thoughts?

Having issues with OS 8.1.5 Security Policies start dropping traffic every morning at 4 am.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!