Upgrading PAN OS from 7.1.X to PAN OS 8.0.X

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Upgrading PAN OS from 7.1.X to PAN OS 8.0.X

L1 Bithead

Hello ;

 

We have been using PAN OS 7.1.x for months and now due to some requirements I am planning to upgrade our PAN OS to 8.0.x but not sure what the possible problems will be. Therefore, will be good if you share your ideas and comments on 8.0X and what problems you faced during the use so I can consider all these steps before taking any action.

 

We use the following features : What problems you faced on the following features in PAN OS 8.0.X
=> SSL Decryption

=> NAT

=> Application / Port Filtering

=> User ID Configuration

=> GlobalProtect

 

I may consider the following features as well in PAN OS 8.0.X
=> Split Tunneling

=> SSL VPN    (Does it require to purchase a new license to use this feature ? )

=> Site 2 Site VPN

 

What version of PAN OS 8.0.X is most stable to be used for large organizations ?

 

Thank You !

5 REPLIES 5

Cyber Elite
Cyber Elite

@Ghafar,

You would be fine with running 8.0.8, and likely by the time you actually perform the update 8.0.9 would move into recommended status. 

Process:

Upgrade to latest 7.1.x maintenance release.  (Download and install)

Upgrade to 8.0.0 base image. (Download and install)

upgrade to 8.0.8/9. 

 

We use the following features : What problems you faced on the following features in PAN OS 8.0.X=> SSL Decryption

=> NAT None

=> Application / Port Filtering None

=> User ID Configuration None (Considerations if updating user-id agent to 8.1.* release)

=> GlobalProtect None 

 

I may consider the following features as well in PAN OS 8.0.X=> Split Tunneling

=> SSL VPN    (Does it require to purchase a new license to use this feature ? ) So...GlobalProtect. 

=> Site 2 Site VPN None

 

8.0.* is a perfectly stable release at this point that shouldn't cause you any issues if running the recommended release. 

@BPry

The global protect feature is still free on 8 isn't it

Yeah you should be in good shape moving to 8.0.8. We went from 7.1.6, I think, to 8.0.6 and have since moved to 8.0.8. 8.0.8 so far has seemed very stable.

@jdprovine,

All of the features that you could utilize without a GlobalProtect subscription you will still have access to. 

@BPry

whew, we never got the mobile subscription cause it was so expensive so that is good to know

  • 3029 Views
  • 5 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!