Experience with PANOS 6 so far ?

[gafrol]

I installed PANOS 6 on our Lab Box. Upgraded from 5.0.9. No problems so far.

Anyone else ?

[dustink]

I received an odd error when I tried to upgrade from 5.0.10 -

" Failed to install 6.0.0 with the following errors. SW version is 6.0.0 Error: Upgrading from 5.0.10 to 6.0.0 requires a content version of 401 or greater and found 320-1459. Failed to install version 6.0.0 type panos"

Maybe I'll try downgrading, to upgrade.

[dustink]

updating / installing the App and Threats option fixed the install

[mr.linus]

Used it in a vwire setup for the DNS sinkholing feature.

Helped me root out a virus infection with a customer.

No issues so far.

[mario11584]

We just bought two new PA-3020s that will go live with 6.0 on Friday night. I'll try to remember and report back and let you know how it goes. I've been using them via the management interface since 6.0 release and I haven't had any problems. Of course, a data load will be the true test.

[pulukas]

Running on a test box now and no issues with the upgrade or the 300 rule policy push.  The tap traffic of production all seems to behave the same way.

On the feature side, ssl port mirror and the dns sinkhole look like good additions to take a closer look at application in the network.

[Quinton]

So far so good. Seems pretty solid. Only issue I found thus far is the dynamic content error when upgrading from 5.x to 6.0. The dynamic content page gives an error and it does not scan traffic for threats.

[cloughr]

We use PA-5020s, and I couldn't wait to update to 6, to take advantage of the safe-search filtering. Unfortunately, when we upgraded it broke our user-id system, specifically the group mappings. 90% of all filtering went out of the 'default" policy. We are a large school system and rely on our group filtering. I reverted back to 5.0.9 and have a case open.

[gafrol]

Still running 6.0 since almost two weeks without any problems. Well done PAN from my side !

[ericgearhart]

gafrol would you care to provide some details of your implementation? PA 5000s? IPsec tunnels? HA? GlobalProtect? What all are you using? Are you taking advantage of the new DNS blackholing?

[mario11584]

We installed new PA-3020s on Friday with 6.0. It's only been a few days and we haven't had a single problem. We have HA, IPSec tunnels, multiple virtual routers, tons of PBFs and static routes and everything has been great.

[mg_imid]

I use PA-3050 in my lab, from 5.0.10 to 6.0.0, but some feature like DHCP is not working well, i try to delete and recreate, then it working.

DNS Proxy is failed too, try to delete and recreate is still problem.

[msullivan]

cloughr,

Has PA resolved this for you?  I use group membership in several critical rules, this kind of issue really grabs my attention.

Thanks,

Mike

[mario11584]

We are using DHCP on 6.0 for one of our networks and it's working great.

[mg_imid]

Hi Mario,

Yes it work for workstation, but tested with mobile phone it can't, then i delete and recreate, it's work well now.

For DNS proxy, i think it should work, because my dns server is the problem then it effect to appliance to resolve name.