What version is the best to decrypt and encrypt 6.1.x vs 7.0.x

[Apadilla]

Hello

I need your feedback about what version in PANOS is the best to decrypt and encrypt ?.

6.1.x vs 7.0.x

Best regards

[Lucky]

Hi,

from the top of my had with so little inflrmation I would say always go for the last / highest version available, unless you have really good reason not to use it?

Best regards,

Luciano

[Apadilla]

Currently I have the version 6.1.4, but I want to upgrade to 7.0.5. I readed in one  forum that  version 6.1 is much better that 7.0. So I appreciate your feedback with this.

Best regards

[vkalal · Accepted solution]

7.0.5 is a fresh release so there is no verdict yet on it's stablity

[Lucky]

There were feature enhancements in 7.0 and additional ciphers were added, it is worth checking. There are no reports on instability of 7.0.5 either, it is just a fresh version 🙂

[pankaku]

7.x series supports more cipher suites for decryption. There are chances when firewall is not able to decrypt traffic because of unspported cipher suites. Check the following document. 7.0.4 is better then previous version.

https://live.paloaltonetworks.com/t5/Management-Articles/SSL-Decryption-Not-Working-due-to-Unsupport...

[Brandon_Wertz]

From what I recalled there are only 2 additional ciphers that version 7.0.X software is capable of processing over version 6.1.X software.

When version 7.1.X software comes out there's projected to be many many more supported cipher suites.  The instability you're alluding to was in PAN-OS software 7.0.3 and <.  Version 7.0.4 is far more stable, especially WTR to SSL.