Quick Note on 8.1.0 Deployments

Reply
L1 Bithead

Re: Quick Note on 8.1.0 Deployments

Hi,

I agree. I have the same issues after upgrading to 8.1.0. Then I have to downgrade too. Thanks.

L1 Bithead

Re: Quick Note on 8.1.0 Deployments

Had the same issues with 8.1.0 and went back to 8.0.8.

 

We experienced slow/non-working domain logons and SMB/CIFS/DFS Shares.

 

If I ran "show session all filter state discard application ms-ds-smbv3" I had lots of sessions discarded. If I looked in detail on one of those sessions with show session id [session-id] I could see that they were discarded due to "resources-unavailable".

 

Some users report that 'Application Override' might be a way forward until the issue is fixed.

 

 

https://live.paloaltonetworks.com/t5/General-Topics/PAN-OS-8-1-0-SMB-Issues/m-p/205760

L1 Bithead

Re: Quick Note on 8.1.0 Deployments

The 8.1.0 Interface is terribly buggy.  I would advise EVERYONE to not use it until they at least patch it once.

 

NAT and Security rules do not highlight correctly at intervals, and it has already cost us production time as we were attempting to modify one NAT rule (after highlighting it) and having it return a different one.  All browsers show this issue too.

 

Its a bad release, and I wish PA would have done a better job of QC'ing it instead of expecting the rest of us to "Fix the airplane before it hits the ground". 

 

Ususally PA is good about this.  But this one is a clear miss, and the release should be pulled.

L6 Presenter

Re: Quick Note on 8.1.0 Deployments


@ITSysEng wrote:

 

Its a bad release, and I wish PA would have done a better job of QC'ing it instead of expecting the rest of us to "Fix the airplane before it hits the ground". 

 

Ususally PA is good about this.  But this one is a clear miss, and the release should be pulled.


 

 

Then there was 7.0.0 which was totally deferred...I think 7.0.0 still wins this "contest" haha

 

 

Totally agree I've always thought the major releases process could use a bit of improvement.  No doubt there's push to deploy new capabilities from Palo, but like has already been mentioned; if as admins of a service, in this case a company's edge/firewall environment the onus is on US as firewall admins to do the due diligence to ensure the code version is stable and appropriate.

 

This includes dev/qa testing if need be.  If an admin wants to risk their career because a new software release is out that's on you.  Not Palo IMO.

L1 Bithead

Re: Quick Note on 8.1.0 Deployments

I'm hearing a target of early May for 8.1.1 roll out, so just a couple more weeks.

Highlighted
L7 Applicator

Re: Quick Note on 8.1.0 Deployments

@Brandon_Wertz,

 

I think you nailed my reaction on all of these "PAN-OS 8.1.0 is real bad; Palo should pull the release; this killed my production network". Palo Alto did not come on premise and force you to upgrade to 8.1.0, Palo Alto didn't stop supplying updates to other software versions, they didn't release hardware that only runs 8.1.0 (unlike 8.0), and Palo Alto didn't automatically install 8.1.0 to anyone's firewall. 

I agree that Palo Alto should, and could, tone down the marketing around 8.1.0 until its actually hit recommended status. There are defiantly mistakes that they've made in that regard. There shouldn't have been as much noise surrounding the 8.1.0 release, the SMB over VPN issues experianced by users of the Beta channel should have been included in the release notes, as it was already noticed by the time 8.1.0 was offically released, and it should have been clear in all communication that it wasn't recommended you actually install it on production equipment. 

 

In the end though it comes down to the decision that you made as an admin. You choose to run 8.1.0, you made the decision to run new code, you made the decision to prioritize features over stability, you failed to QA the code with your configuration to verify it didn't effect your production network. YOU caused an outage or a degradation of services because you installed 8.1.0 on your production equipment without validating it worked for you and your company.  

 

 

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!