Issue with the PANOS Version 11.1.4-h7

[ChandrashekharD]

Hi Friends,

We have a customer who is experiencing issues after upgrading their firewall to version 11.1.4-h7. The firewall is not functioning properly, with many websites being inaccessible and few customer reported a sudden spike in management plane usage. I suspect this could be due to a bug in this PAN-OS version, as multiple customers have reported similar problems after upgrading. However, this version is still listed as a preferred release in the PAN-OS Software Release Guidance.

Please advise on the necessary steps to resolve this issue and recommend the most stable version that should be installed to mitigate these problems.

Regards,

Chandrashekhar

[BPry]

@ChandrashekharD,

While 11.1.4-h9 isn't preferred I've got customers running it without any issues, h13 also just got released to fully address the latest CVEs that are present. What version of PAN-OS did they actually upgrade from, is this their first install of 11.1 or have they been running it already?

PAN-OS 11.1 is kind of a mess from a code quality aspect, and I've never really seen a branch that has demanding knowing what features you're using and what platform you have to identify the "best" release as much as this one. The management plane spikes are persistently reported throughout 11.1, I haven't heard of a "fixed" release for that yet.