Recommended Software release

[micahacruz]

Hi PAN Community!

I'm just wondering if there's a dedicated page/link I can refer to if I want to confirm if a certain release is recommended or not. I don't want to raise a TAC case everytime. Thanks!

[kiwi · Accepted solution]

Hi @micahacruz,

You can also raise your question here :

Today's recommended releases per branch :

For PAN-OS

6.1.18

7.1.14

8.0.6

For Panorama on VM / VM-100 / VM-500

6.1.18

7.1.14

8.0.6

WF-500

7.1.14

6.1.18

Traps

4.1.2

4.0.4

3.4.4

GlobalProtect

4.0.4

3.1.6

UID

8.0.4

7.0.8

6.0.9

Cheers !

-Kiwi

[pulukas]

I'll second the request that TAC maintain a permanent kb type page with the current recommended releases.  This is helpful for upgrade planning.

[BPry]

I'll third this request. 

While I have a lab enviroment where I can properly test all software releases and verify they'll work for us, I know that many users don't. Having a simple webpage to refer to, or even a little symbol on the 'software' page on the support webpage would be a much better user experiance than having to contact TAC simply to get the recommended software release. 

[micahacruz]

My experience with PAN community is amazing so far, but it will be less time consuming if they'll make it available to the public.

[jdprovine]

@kiwi

I am currently on the globalprotect client version 4.0, and am planning to move to some version of 8.0 this summer. 1. will I have any issues with 4.0 2. Are there any lower version of GP that will not work with 8.0? I still have some users that are on some versions of 2.0 they so far are unwilling to upgrade

[BPry]

@jdprovine,

Currently the minimum supported version of the GlobalProtect Agent when using PAN-OS 8.0 is 4.0.0. 

[jdprovine]

@BPry

Well that might be how I get the rest of the users to upgrade to 4.0 LOL upgrade to 8

[BPry]

@jdprovine,

I honestly wouldn't be too surprised if it still functioned even after the upgrade. It definitely wouldn't be supported however, and any issues that you report the response from TAC would simply be 'upgrade'. 

[OtakarKlier · Accepted solution]

Hello @micahacruz,

Another thing to consider is what fixes and known vulnerabilities exist in the current version youare running and what version ou plan on going to. I highly recommend reading the release notes, they are pretty thorough as compared to other companies release notes. 

For my company, we have a 30 day remediation requirement for any known vulnerabilities. Right now we are on the latest 8.0.x and dont seem to have any issues.

Cheers!

[jdprovine]

@BPry

Yes I have gotten that answer before from TAC.  I did do some testing on my own and found that some versions of GP have had a dramatic security changes and did not work with the newer versions of the OS's

[mans-paloalto-support]

Was this ever truly solved with a page with recommended software releases? What are the recommended releases as of today (5/23/18)?

[BPry]

@mans-paloalto-support,

Nope. You either contact us and we can let you know what was last reported by one of the community members or what we last recieved from TAC ourselves. 

PAN-OS 8.1.1 - This is not recommended, meaning you shouldn't be running it in production. If you must have the latest and greatest, run 8.1.1. 

PAN-OS 8.0.9 

PAN-OS 7.1.16

PAN-OS 6.1.20 (You should be upgrading, support runs out shortly). 

[mans-paloalto-support]

Please update with the current set of recommended OS versions.

[BPry]

@mans-paloalto-support,

PAN-OS 8.1.2 - This is not recommened, meaning you shouldn't be running it in production. If you must have the latest and greatest run 8.1.2 so you get the latest bug fixes with 8.1

PAN-OS 8.0.9 - 8.0.10 is released but has not yet entered recommended status

PAN-OS 7.1.17

PAN-OS 6.1.20 ( You should be upgrading) 

As you can see the recommended releases really hasn't changed; 8.1.* still does't have a recommended release and 8.0.10 is too new to actually get recommended status, although I haven't heard of anyone running into any issues with it.