In this example, we are upgrading a hypothetical customer (ACME, Inc.) from PAN-OS 7.1.16 to 8.1.6 (with 8.0 as an interim step).ACME firewall is configured in Active/Passive HA cluster managed by Panorama (this is the most common configuration in use today). We are not covering Active/Active, non-HA scenarios or scenarios where there is no Panorama installed.This is a best practice document. It is not meant to be a step-by-step procedure. Please create your own step-by-step procedure, if necessary.Customer is responsible for verifying all steps before the upgrade.TerminologyActive firewallThe firewall in an HA cluster that's passing trafficPassive firewallThe firewall in an HA cluster that's not passing trafficPrimary firewallThe firewall in an HA cluster that's usually the active firewallSecondary firewallThe firewall in an HA cluster that's usually the passive firewallFeature releaseContains new features and bug fixes, typically ends with.0 (i.e. 0)Maintenance releaseBug fixes only, typically ends with.number (8.1. 2)DependenciesBefore you upgrade, make sure the firewall is running a version of app + threat (content version) that meets the minimum requirement of the new PAN-OS ( ).
For installation, upgrade, and downgrade instructions, refer to the PAN-OS 8.0 New Features Guide. To ensure that you are viewing the most current version of these Release Notes, always defer to the web version; do not store or rely on PDF files to be current after you download them. 8.0.4 released on 2011-09-16 Improvements Grid Component Allow adding/removing non-adjacent rows in selection by ctrl+click in the grid row header.
PAN-OS 8.0: Protection. Delivered.To provide organizations with the best security capabilities to prevent successful cyberattacks, PAN-OS ® 8.0, includes a colossal amount of enhancements and capabilities, including:. Secure any cloud! AWS, Azure and more. Secure SaaS (Office 365 ®, Box, Slack ®) with visibility and enforcement.
Prevent sandbox evasion, automate C2 detection, and leverage advanced intel sharing. Prevent credential theft usage and abuse. Simplify security operations with enhanced management, speed and automation. New high-performance hardware models to tackle encrypted traffic and moreLearn more about the new.For questions about PAN-OS 8.0 visit the. Accelerating Multi-Cloud DeploymentsOrganizations are rapidly embracing multi-cloud architectures that span software-defined data centers (private clouds) and public cloud environments. To help organizations protect their cloud-based applications and data from cyberattacks, PAN-OS 8.0 expands the VM-Series with new models and optimized performance, making it the broadest, most powerful line of virtualized firewall appliances on the market. New scalability and resiliency features for Microsoft ® Azure ® and Amazon ® Web Services enable organizations to build secure cloud centric architectures.
Workflow automation features for VMware ® NSX ® and KVM with OpenStack ® help streamline VM-Series deployments.Related Links:. Innovation Page:. Enabling the Safe Use of SaaS ApplicationsSoftware-as-a-service (SaaS) applications are changing the way organizations do business. Despite being incredibly useful tools to drive productivity, they pose high levels of risk.PAN-OS 8.0 introduces several new capabilities helping our customers gain unprecedented levels of SaaS visibility and control based on users, content and applications. Prisma™ SaaS security service, a key component of our platform for securing sanctioned SaaS applications, is now available globally with the launch of new data centers in Europe and Asia. This global expansion also introduces enhanced data leakage prevention (DLP) and machine learning capabilities for documents written in native regional languages, such as German and Japanese. Furthermore, Prisma SaaS has added support for complete automation of policy violations, enabling our customers to remediate large volumes of risk with minimal overhead.Our integrated platform provides detailed SaaS visibility and granular control, data governance, automated risk remediation, and malware prevention, so organizations can achieve complete SaaS protection.Related Links:.
Press Release:. Innovation Page:. Preventing Credential-Based AttacksThe theft and use of stolen passwords is one of the oldest attacks in the book, yet it remains highly effective.
High-Performance, Intelligent, Centralized ManagementThe most innovative, advanced technology loses value if not managed effectively. The Panorama™ network security management 8.0 release introduces new capabilities that provide organizations with access to the richest, most comprehensive set of actionable data from the network as well as from the endpoints secured by Palo Alto Networks Traps™ advanced endpoint protection or from other third-party sources in the future. Combined with complete network visibility and increased automation, organizations are able to streamline management workflows and focus on the issues that matter most.Related Links:. Innovation Page:. New Family of Breakthrough Performance HardwareThe increasing use of encrypted traffic and rapid consumption of cloud-based applications, coupled with ever-increasing data center consolidation, are driving new processing power, performance and capacity requirements. Powered by PAN-OS 8.0, the new hardware appliances help deliver next generation of security capabilities anywhere in the network including datacenter cores, enterprise perimeters, as well as branch and remote offices.Related Links:. Press Release:.
Innovation Page:. Simplifying User-ID Deployments at ScaleUser-ID™ technology, a standard feature on Palo Alto Networks next-generation firewalls, enables you to leverage user information stored in a wide range of repositories. PAN-OS 8.0 introduces powerful enhancements that make it easier for organizations of all sizes to control access to their resources based on user identity. By ensuring that only the right users have access to the right resources at all times, User-ID mitigates problems associated with identity theft and helps prevent modern-day breaches.Related Links:. Innovation Page:.