PAN-OS recommendation

Highlighted
L2 Linker

PAN-OS recommendation

Dear All,

 

Currently PA 5200 is running with PA-OS-8.0.13 and we are facing issues with the number of objects that we could create.

 

Release notes of 9.0 provides a promising object count increase. Kindly provide a stable version of 9.0 and PoA to upgrade from 8.0 to the recommended version.

 

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/management-features/mgmt-object-cap...

 

Thanks in advance

L7 Applicator

Re: PAN-OS recommendation

Hi @karthikeyanB 

 

So far PAN-OS 9 is still to new to have a recommended version by PaloAlto TAC. In march 2019 the recommended releases are: 8.1.6 , 8.0.15 and 7.1.22.

Do you need all the address objects or could it be that a lot of them are unused? 

L7 Applicator

Re: PAN-OS recommendation


@karthikeyanB wrote:

 

Release notes of 9.0 provides a promising object count increase. Kindly provide a stable version of 9.0 and PoA to upgrade from 8.0 to the recommended version.

 


Plane and simple, there isn't one. If it is determined that you can't lower the object count on your device, and that you really need to utilize objects in your policies, then you would need to review the known issues with PAN-OS 9.0, and those specific to 9.0.1, HERE and determine if the business risk of utilizing the new release is worth the object count increase. I would hazard a guess that you wouldn't want to increase potential for downtime just to get an object count increase, but that's a business decision that your organization needs to make. 

L2 Linker

Re: PAN-OS recommendation

PAN used to offer advice on Recommended releases, recently this changed to Preferred releases.

 

9.0.1 has a P* status which means it's a preferred release with additional notes. I'd suggest you ask the TAC for guidance on this as there may be some issues that will cause problems, but it looks like it may be a viable release for you early on its life.

 

Sometimes you may need to upgrade to a newer, less stable release if you require features. You may need to live with some minor issues though if you do upgrade.

 

Jason

 

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!