PAN-OS 5

[LCMember2860]

so the long-awaited v5 is now available.  What are the implications of upgrading to it?

• is rollback to v4 straightforward (we're on 4.1.8 now)?
• does it force you to use the new PAN web-filtering database, or can you continue to use Brightcloud?
• Do we need to make changes to our rulebase (in particular WRT to the changes in the way app dependencies work in v5)?

I don't particularly want to be a guinea-pig, but I am keen to see what improvements have been made.

[dyang · Accepted solution]

As far as URL filtering goes, the 5.0 release simply gives you the option of using PAN-DB for URL filtering instead of BrightCloud; you are not forced to use either.  BrightCloud is and will be fully supported, so you may continue to use and purchase licenses for it.

[almay]

I was told by support a couple of times that site-to-site VPN Proxy ID capacity would be increased from 10 to 250 IDs per tunnel interface.  As well as support for Google safe image search.  Has this been verified by anyone?

[Retired Member]

Regarding app dependencies in rulebase, you can upgrade from 4.1.8 to 5.0.0 fine as any explicit allow rules that you already have for app dependencies will continue to work as it did before. So there should be no modifications needed there. Regarding proxy-id limits increased, this has been increased from max of 10 to 250 for all platforms except for PA-200. PA-200 will support up to 25 proxy-ids.

Regarding Google safe image support, please contact your Palo Alto Networks sales rep for information about upcoming new features.

-Richard

[RNC]

What are the benefits of PAN URL-DB over BrightCloud to your customers?

Kind regards & Thanks.