Firmware upgrade ver from 10.2.10 to 11.1.x.

[S.Sinha133327]

Hi Support,

Our organization is in the process of upgrading the firmware of Palo Alto 460. We are now on 10.1.10. We would like to upgrade to 11.1.x. I would like to know which is the recommended version. There is always a dilemma of which version is the best and have minimum vulnerabilities. By reading various documents it is more confusing to understand which version is the best as there are always many vulnerabilities in every version which are not addressed. 

Which version you would suggest if I have to choose between 11.1.4 / 11.1.5 / 11.1.6

Your early response is appreciated.

Thanks,

Sanjay 

[kiwi]

Hi @S.Sinha133327 ,

You can always check the Support PAN-OS Release Guidance page:
https://live.paloaltonetworks.com/t5/customer-resources/support-pan-os-software-release-guidance/ta-...

There you will find the preferred release for each PAN-OS train (marked by P).

In this case 11.1.4-h7 is the preferred version for PAN-OS 11.1.x

If you ABSOLUTELY need a fix which was addressed in a newer version then you can use that one of course ... just be aware that newer versions are still being monitored and could potentially have unreported bugs.

Kind regards,

-Kim.

[S.Sinha133327]

Hi, 

I can see there is a bug reported and not fixed in 11.1.4-h7 related to GlobalProtect which can impact our users. This bug is fixed in 11.1.5. 

Please let me know if we go with 11.1.5 or 11.1.6 ?

Thanks,

Sanjay