PANOS 7 on PA-2020 ?

[dieter_b]

Will it work ?

I don't mean like is it compatible.

I mean: Will it be manageable at all, seeing that version 6 is already a management nightmare ?

Is anyone on PA-2020/2050 on version 7 and what are the experiences ?

I see some changes that may be useful for alleviating management (eg Time-Based Log and
Report Deletion), but will it be enough ?

[cpainchaud]

IMO, pressure your sales to get good deal for a  3000 series replacement.

[dieter_b]

I'd like that, but such deal should be reasonable:

We paid licenses/support up front, still a few years to go. But the remaining time is not fully reïmbursed !

At the same time they want to sell us a new product (investment) - sure, with discount, but it's a more expensive product in the first place! -

AND

new licenses/support for a new 3-year contract (exploitation).

Given that, I'm sticking with the PA-2020 for now, at least until the contracts expire (2017). If by then PA makes me a reasonable offer (remaining licence/support value will not matter anymore), I'll consider it. If not, it's time to change vendor.

[cpainchaud]

I think you should insist, most customers around had great incentives to switch.

In the meantime I know no one with 20XX who switched to 7.0. I suspect there shall be little to no improvment there but I could be wrong

[dieter_b]

Trust me, I insisted...

The reseller can only do so much. In the end Palo Alto sets the terms.

Even our regional (Belgium) PA account manager wasn't able to go much further. Prices are set elsewhere (probably some dark office in the States 😛  ). I don't get companies who have a regional account manager who isn't allowed to change anything...

[Hithead]

Your best excuse for having a PA2000 series 🙂

[jpeters]

7.0.2 runs on a 2k, in fact I have seen an improvement in commit times. 

[dieter_b]

How long have you had it running like that ?

Immediately after an upgrade (reboot), commit times are always better. Situation worsens with time.

[sdolen]

My 2050s are unmanageable after about a week of uptime on 6.1.5.  Considering giving 7 a chance, could it get any worse???

We are stuck with our 2050s for at least a few more years, I may just have to roll back to 5x and take my chances.  We can't afford to buy new firewalls every few years. 

[TomH]

I have just upgraded my PA-2020 to 7.0.2. I was surprised!!! Management CPU hovering 'round 18% and commit times have dropped considerably. 

However, it's been on 7.0.2 for only 2 days, so IMHO, the jury is still out.