Upgrading from 5.0.8 to 6.0.2 was an adventure for us; we have upgraded the Panorama, then the 5020s and 3020s, but once the upgrade was done, we started encountering an issue where the devices in Panorama Device Group showed as Out of Sync; committing the configuration would fail to all of them with an error regarding two custom applications we created and spyware identification option, which would classify the applications as invalid. We moved to 6.0.3 as there seemed to be a fix (issue 63608); however, even after upgrading to 6.0.3, we had to remove the two custom applications from the Application Override and security policies on each individual device (HA peers would not sync the configs neither), then delete the custom applications from Panorama, then successfully commit the changes to the device group. When we thought we were done with the issues, we are now trying to solve one on the 5020s, where the secondary device becomes the Active one, and the primary is not the passive but it displays this error: We are not reverting back to 5.0 because there were features that we really looked forward to having (netflow stats, AGG interfaces monitored in SolarWinds), but trying to solve this one issue (so far).
... View more
Hi I waiting for 6.0.2 and I realized that veriosn 5.x was released in almost every month, but 6.0.x in every two monts - is this a new practice in PaloAlto? Hopefully that it will be better checked than early 5.0.x version. Regards Slawek
... View more