Any recomendations?
PanOS at 10.1.8
GP 5.2.x,6.0.x, 6.1.x, 6.2?
6.2 seems too new
Have 6.0.7 on 18k machines. It has been solid.
I’m rolling out 6.1.2, tac preferred and no issues yet.
6.1.1 has been solid for us. Nothing but issues with 6.2.0. Testing the 6.2.1 release now.
I think 6.2’s feature only come into play if you are running PanOS 11?
i’m gonna stick with the 6.1 line for awhile.
I have about 10k machines
We have been running 6.1.1 without any problems for nearly 6 months. Very stable from my perspective.
We’re running 6.0.3 on about 25k machines. Just had a conversation about starting our testing/upgrade process with 6.0.7.
We discussed 6.1 and 6.2 but their support cycle isn’t really what we’re looking for. 6.1 goes end of life before 6.0 and 6.2 is only supported 3 months longer then 6.0. So for now, we’re sticking with 6.0 as we don’t need the new features of the newer versions
We’ve been on 6.2 for around 4 weeks and it has been very stable, no issues so far on ~300 machines
Our company has been using GlobalProtect 6.2 since it came out and just upgraded to 6.2.1 with no issues. We have dozens of users on Windows 10, Windows 11, and Mac. We integrate with Active Directory for authentication.
Guys where do I download it from?
Have a production change to do this on the 23rd myself. Been running 6.2.0 and personally no issues thus far from my experience.
No serious issues on 500+ of 6.1.2.
Just 5 upgrade failures we remediated by software repairs/installs using or software deployment tool which is available without VPN. (Liquit)
yeah…trying 6.1.2
6.2.x seems way to new
Sorry for bugging you about this so long after your comment, but would you be willing to comment on the problems you are having with the 6.2.x versions?
The last 2 GlobalProtect versions, 6.2.1 and 6.2.2 have been problematic for us. We have (potentially) around 200 systems connecting via VPN at any given time.
We had to downgrade 20+ systems due to problems with connectivity after certain problems would recur. Downgrading to version 6.1.2 has solved all problems these systems were having.
- Problems caused by GlobalProtect versions, 6.2.1 and 6.2.2
- Problems with the PanGPS Service after a system comes out of sleep. VPN appears to be connected, but staff are unable to access resources, such as mapped drives. They have to manage to disconnect and then they can create a new VPN connection.
- Disconnect button on the GlobalProtect app sometimes becomes unresponsive. We have to use Taskkill against the PanGPS service to get it to disconnect.
- When PanGPS is in this unstable state, GlobalProtect will sometimes immediately reconnect after a restart, again requiring we run Taskkill against the PanGPS service to get it to disconnect.
- Uninstalling the problematic versions of GlobalProtect will sometimes fail for a couple of reasons. The root of it is most likely that the PanGPS service will not stop so the uninstall can proceed.
Never had a problem with GlobalProtect version 6.1.2 or earlier versions. We wound up pushing out 6.1.2 again to make sure staff stops having problems.
- Note about our Windows version
Windows 10 Enterprise LTSC 2019 (version 1809) - This is our current primary OS version. Probably 95% of our systems currently have this version of Windows installed.
We are just beginning to upgrade Windows, so I believe virtually all of the systems that have exhibited the problem likely have W10 LTSC 2019.
I am curious if a clean Windows install, or the newer version of Windows might resolve the issue, but we haven’t had the opportunity to adequately test this out yet. Regardless, this would be a solution that would take a while to implement. It would, however, be useful to know while we work towards a solution to our issue.
thanks.
Our SE just recommended 6.0.7…or possible 6.1.2
The Palo Alto Support site.
Go here, login with your support account. https://support.paloaltonetworks.com/Updates/SoftwareUpdates/
6.2.1 feels pretty good so far. Better than the previous.
I’m testing 6.2.1 but it’s having issues with windows version 22H2