4.0.9 to 4.1.6 - Issues to be aware of?

[networkadmin]

Are there any known issues to be aware of if I wanted to go from 4.0.9 to 4.1.6?

We had an issue when we went from 4.0.9 to 4.0.11 where the dataplane on our PA-500 randomly rebooted several times and support's initial suggestion was to do a factory reset/restore of the box.

I'd prefer not to do that if it's avoidable, so I figure there should be no harm in seeing if moving 4.1.6 fixes it.

It doesn't help that Palo Alto don't exactly make it clear when and why you should move to a new version of PAN OS....

I'm assuming the two main issues to address are the PAN Agent and that there's a half hour to an hour window of unavailability during the reboot and upgrade, but other than that...

Thanks.

[JKoss]

OTTOMH -- our biggest issue was the loss of NetConnect, and the use of Global Protect in it's place.  (It works, but GP is kind of Beta quality as far as the unlicensed mode goes...)

[mikand]

Also taking an offline backup of running-config.xml BEFORE you start is advisable aswell (and make sure to store backups of this backup in several places at least until your migration was successful 🙂