PAN-OS 10.1.x recommended version for PA-850 device

[Ramees]

hello,

 will the new version 10.1.3 be recommended for PA 850 ? Has anyone faced any issues. 

[TomYoung · Accepted solution]

Hi @Ramees ,

PAN-OS 10.1 is so new that there is no recommended release for it yet -> https://live.paloaltonetworks.com/t5/customer-resources/support-pan-os-software-release-guidance/ta-....  I have it installed on 1 production firewall with no issues.  I see no known issues related to the PA-850 -> https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes.html.

PAN-OS 10.1.3 would have the most bug fixes.  So, I would go with it.  If you want new features in 10.1, I would go with the latest release.  Otherwise, 10.0 is definitely more safe.  Typically, I wait 12 months before putting a new release into production.

Thanks,

Tom

[Ramees]

thanks. I did the upgrade on a green field environment and i see occasional CPU spikes which concerns me . 

[TomYoung]

Yeah, I have noticed that 10.x runs a little slower than 9.x on many firewalls.  I have installed in on a PA-220.  There is a known issue that "PA-220 firewalls are experiencing slower web interface and CLI performance times."  Because of that bug, the CPU spikes and slowness are a lot worse.  However, the data plane seems fine.