Palo Alto - First time updating

[jamesfed]

Hi all!

 

New job, new firewall! After a good 2 years with a Smoothwall I'm now looking after a Palo Alto 3020. Its handling firewall through the virtual wire feature; DHCP and not much else.

 

Currently running on version 6.0.6 and looking to move it to the latest version (6.1.5 via 6.1.0 which looks to be a prerequisite).

 

Before I press the big install button later this week is anyone aware of any gotachas in the update process?

 

Cheers,

James

[john]

@Soulfish is a PA expert from a past life....

[gshaw]

Our Palo support usually says to hold off any brand new releases until they're classed as stable. May be worth checking if you have maintenance on the device and see if you can ask the question to whoever holds the support contract to confirm which version is best to move to.

[jamesfed]

Just spotted that 7.0.1 has been released - only a few days ago though so will hold back on that one for the time being (thanks @gshaw).

 

Went for the upgrade to 6.1.0 just now - took about 4 minutes to reboot so I'm quite happy with that! Shall see how it runs for a day and then give 6.1.5 a go.

[bob_uk2k]

Hi,

 

Usually upgrades are rock solid however as with any early release it's worth waiting.

 

The 7.0 was pulled the other day due to an issue and a 7.0.1 was brought out.

Also when going up to 7x there was a note about LDAP changes which I bypassed only to find I could no longer use ldap admins to get into the unit so I would suggest for 7x wait a little longer and make sure you have a local admin to fix issues once upgraded.

 

Robert

[jamesfed]

Sounds good - 6.1.5 went just fine as well a little longer at 5mins 30s before I got any pings back.

 

Cheers for the heads up about 7.0/7.0.1 as well - will hold off for now until the first incremental