PANOS 4.1.0 has a major FLAW

Reply
Highlighted
L0 Member

PANOS 4.1.0 has a major FLAW

where do should I get support  to fix a critical ad major issue with PA 5050 running 4.1.0.

When issuing  "commit" command the unit drop connenctions and teh arp tables get corrupted for about 30 minutes.

As far as PaloAlto Support the issues is major and was discovered two weeks ago when troubleshooting with CB but the fix won't be available for anotehr 6 weeks.

I think that is not fair and someone need to Tell Nir Zuk we need fast response because one of teh reason I dropped Checkpoint 8 years ago was because of lack of response to customer and the turn around on fixing bugs.


Accepted Solutions
Highlighted
L0 Member

Re: PANOS 4.1.0 has a major FLAW

Just wanted to say we're now running 4.1.4, with some PA Support provided workarounds (thanks JW).

Full Active/Active at two sites, ospf and commit problems gone too.

4.1.7 is sleighted to have all the workarounds included or fixed.

View solution in original post


All Replies
Highlighted
L4 Transporter

Re: PANOS 4.1.0 has a major FLAW

Hello,

Thank you for sharing this information. we're mass-deploying 4.1 and our 5050 pair is next.

Highlighted
L4 Transporter

Re: PANOS 4.1.0 has a major FLAW

Have you asked if there is a hotfix?

Highlighted
Not applicable

Re: PANOS 4.1.0 has a major FLAW

If anyone will find firewall vendor which cares about its customers, please let me know :smileylaugh:

Highlighted
L2 Linker

Re: PANOS 4.1.0 has a major FLAW

Hi,  I'm very sorry that you are experiencing issues with 4.1.  Can you message me with your support case number so that I can research this and assist you in getting resolution?

Best Regards,

Marc

Highlighted
L2 Linker

Re: PANOS 4.1.0 has a major FLAW

Thanks for the heads up.  Was going to upgrade a pair of PA 2020s and begin deployment of PA 5050s using 4.1.  The PA 2020 upgrade will wait.

The PA 5050 deployment will be on hold.

Highlighted
L1 Bithead

Re: PANOS 4.1.0 has a major FLAW

Thanks for the info.  Palo Alto Support people, if you have such a critical bug you should pull the update.  Having a major issue like this is going to cause everyone major issues when it can be avoided.  I will delay our rollout as well.

Highlighted
L0 Member

Re: PANOS 4.1.0 has a major FLAW

We're running 4.1.0 on an active/active pa5050 pair.

I have shut down one pa5050 due to asymetric routing issues that are  my fault

( addressed in a PA OSPF tech note -  https://live.paloaltonetworks.com/docs/DOC-1939 ). Lots of non-syn-tcp streams.

I sometimes see commit problems with my ospf routers (Cisco, Avaya) connected to the PA's, mostly when I make Device -> Interface changes. They were especially annoying when both PA's were active. Panorama policy pushes don't seem to cause these hiccups.

I'm intending to upgrade to 4.1.1, hopefully tomorrow morning.

Highlighted
L4 Transporter

Re: PANOS 4.1.0 has a major FLAW

According to this doc: https://live.paloaltonetworks.com/docs/DOC-1982 4.1.1 may not have the fix :smileygrin:

Highlighted
L6 Presenter

Re: PANOS 4.1.0 has a major FLAW

Has this been resolved yet?

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!