Recommended Software release

[micahacruz]

Hi PAN Community!

I'm just wondering if there's a dedicated page/link I can refer to if I want to confirm if a certain release is recommended or not. I don't want to raise a TAC case everytime. Thanks!

[kiwi · Accepted solution]

Hi @micahacruz,

You can also raise your question here :

Today's recommended releases per branch :

For PAN-OS

6.1.18

7.1.14

8.0.6

For Panorama on VM / VM-100 / VM-500

6.1.18

7.1.14

8.0.6

WF-500

7.1.14

6.1.18

Traps

4.1.2

4.0.4

3.4.4

GlobalProtect

4.0.4

3.1.6

UID

8.0.4

7.0.8

6.0.9

Cheers !

-Kiwi

[OtakarKlier · Accepted solution]

Hello @micahacruz,

Another thing to consider is what fixes and known vulnerabilities exist in the current version youare running and what version ou plan on going to. I highly recommend reading the release notes, they are pretty thorough as compared to other companies release notes. 

For my company, we have a 30 day remediation requirement for any known vulnerabilities. Right now we are on the latest 8.0.x and dont seem to have any issues.

Cheers!

[mans-paloalto-support · Accepted solution]

I see there's a lot of fixes in 8.0.12 -- so are they now recommending 8.0.12 for install or is it too fresh and they're going with 8.0.11-h1? Or because 8.0.11-h1 was a rushed hotfix, should I continue to recommend 8.0.10?

Thanks.

[kiwi · Accepted solution]

Hi @micahacruz,

You can also raise your question here :

Today's recommended releases per branch :

For PAN-OS

6.1.18

7.1.14

8.0.6

For Panorama on VM / VM-100 / VM-500

6.1.18

7.1.14

8.0.6

WF-500

7.1.14

6.1.18

Traps

4.1.2

4.0.4

3.4.4

GlobalProtect

4.0.4

3.1.6

UID

8.0.4

7.0.8

6.0.9

Cheers !

-Kiwi

[pulukas]

I'll second the request that TAC maintain a permanent kb type page with the current recommended releases.  This is helpful for upgrade planning.

[BPry]

I'll third this request. 

While I have a lab enviroment where I can properly test all software releases and verify they'll work for us, I know that many users don't. Having a simple webpage to refer to, or even a little symbol on the 'software' page on the support webpage would be a much better user experiance than having to contact TAC simply to get the recommended software release. 

[micahacruz]

My experience with PAN community is amazing so far, but it will be less time consuming if they'll make it available to the public.

[jdprovine]

@kiwi

I am currently on the globalprotect client version 4.0, and am planning to move to some version of 8.0 this summer. 1. will I have any issues with 4.0 2. Are there any lower version of GP that will not work with 8.0? I still have some users that are on some versions of 2.0 they so far are unwilling to upgrade

[BPry]

@jdprovine,

Currently the minimum supported version of the GlobalProtect Agent when using PAN-OS 8.0 is 4.0.0. 

[jdprovine]

@BPry

Well that might be how I get the rest of the users to upgrade to 4.0 LOL upgrade to 8

[BPry]

@jdprovine,

I honestly wouldn't be too surprised if it still functioned even after the upgrade. It definitely wouldn't be supported however, and any issues that you report the response from TAC would simply be 'upgrade'. 

[OtakarKlier · Accepted solution]

Hello @micahacruz,

Another thing to consider is what fixes and known vulnerabilities exist in the current version youare running and what version ou plan on going to. I highly recommend reading the release notes, they are pretty thorough as compared to other companies release notes. 

For my company, we have a 30 day remediation requirement for any known vulnerabilities. Right now we are on the latest 8.0.x and dont seem to have any issues.

Cheers!