PAN-OS 5.0.7 Never again

[soporteseguridad]

Hi,

We upgraded our PA to PANOS 5.0.7 and the day after the users report several problems: accessing to internet, and the vpn client Global Protect wasnt working. We have done a revert to the version 5.0.5 and now its rowking propertly........

Anyone has had any of this problem with the release 5.0.7:

-Slow internet

-Any webs working and others web no

-Global protect vpn not working, and gateway web not available.

Thanks a lot

[panos]

5.0.7 has some known bugs so I advice 5.0.6

[soporteseguridad]

there is any PANOS version without bugs???? In 5.0.3 dataplane restarts suddenly.....In 5.0.7 PA goes crazy..........

thanks

[ericgearhart]

soporteseguridad: Nope! There isn't a PANOS version release without bugs. PA really needs to up the ante on their QA department. All these features should be going through regular stress testing before a release.

We've learned the hard way to wait until a .10 release is out before trying to move to it. We're waiting for 5.0.10 to come out before we even consider moving production workloads to it.

PANOS 4.1.13 has been stable for us though.

[soporteseguridad]

So what its your advice......back to 5.0.5 or 5.0.6?

thanks

[panos]

if you don't have multivsys and you don't use SNMPv3 5.0.6 is ok

[ericgearhart]

panos you've had issues with SNMPv3 on 5.0.7? Really?

I'm waiting on Zabbix 2.2 to be released which supports AES/SHA for SNMPv3, but that's yet another gotcha! Again, QA. Come on.

[panos]

No I don't have issues.There is support's official bug with snmpv3

it did not hit you maybe that is normal

[ericgearhart]

It didn't hit me because I'm not doing v3 yet, I was just planning on doing it in the near future 😕

[panos]

I think 5.0.8 will come soon.

[ericgearhart]

Sweet, then we're only 2 releases away from 5.0.10, which is the magic revision that seems to finally have all the new features in a major rev ironed out :smileylaugh:

[licenselu]

Hello,

An active cluster (PA500) running 5.0.7 goes "offline" this afternoon.

-  Some webs sites working and others no

- HTTPS traffic was blocked to all financial web site.

After failover, everything was OK

Rollback to 5.0.6.

Regards,

HA

[nextgenhappines]

Did you have a chance to check against the dataplane pool statistics?

Re: Decryption problem with 5.0.7   Read the the post by shasnain

[nextgenhappines]

Agree about the QA issues.  We used 5.0 since day1 and we must have at least one bug that force us to upgrade to the next release.

[_slv_]

PAN OS 5.0.8 went out on 2013/10/01 - somebody try it on non-test environment?