Upgrade to latest 7.0.x or 7.1.x?

[iweltag]

Hi,

we are planning to upgrade our 3020 A/P Cluster to latest PANOS (7.0.x or 7.1.x). Currently we are runing 6.1.13.

We want to do more SSL Decryption (Inbound & Forward Proxy). What are you thinking is the best and stable release for 3020 A/P Clusters and SSL Decryption?

Is there a official site where we can check the palo alto recommended releases?

Thank you.

[TranceforLife]

Hi,

No there is no officially recommended version, but you can check these 3 links:

7.1 better for decryption:

 https://live.paloaltonetworks.com/t5/PAN-OS-7-1-Articles/PAN-OS-7-1-Supported-ciphers/ta-p/71969

Critical Issues Addressed in PAN-OS Releases

https://live.paloaltonetworks.com/t5/Management-Articles/Critical-Issues-Addressed-in-PAN-OS-Release...

Security Advisories:

https://securityadvisories.paloaltonetworks.com

Will give you a good understanding same as release notes.

Thx,

Myky

[BPry]

If you're main importance is decrypting the traffic go with 7.1 since that supports the most ciphers. Either release at this point has proven to be stable. 

[mlinsemier]

We have had good luck with PAN-OS 7.1 as long as you are running 7.1.4-h1 or later.  I would recommend going to 7.1.6 as we have been running it pretty much issue free in our environment.

[iweltag]

Hi

wow - thank you 🙂

[santonic]

Running 7.1.5 for a while now, no issues.

[kiwi]

Hi @iweltag,

Current recommended releases for each of these 2 branches are PAN-OS 7.0.11 and PAN-OS 7.1.6.

Cheers !

-Kim.

[Brandon_Wertz]

100% with what @TranceforLife posted.