DotW: Which version of PAN-OS is best to decrypt and encrypt: 6.1.x or 7.0.x?
Resolution
Which version of PAN-OS is the best for encryption or decryption? Is the latest version always the best? Should I consider an upgrade? All valid questions and you might not be sure how to move forward without a little discussion and direction.
In this week's Discussion of the Week, user Apadilla asks about this exact topic and wants some feedback and advice about which PAN-OS version is the best to decrypt / encrypt.
User Luciano jumped in on the discussion, explaining that with so little information, one would always go for the latest version available, unless you have really good reason not to.
Sure enough, PAN-OS 7.0.x does have quite a few enhancements, as you can see on the new feature page:
Also, user pankaj.kumar joined the discussion pointing out that PANOS 7.0.x supports a couple of new cipher suites, allowing more sites to be decypted. Note that the content cannot be decrypted when unsupported protocols or ciphers are used. The only way forward in that case is to block the site in question or not to decrypt it.
SSL decryption not working due to unsupported cipher suites
In the end, veteran contributor Brandon_Wertz jumped in, explaining that when PAN-OS 7.1.X software comes out, there's a chance that many more cipher suites will be supported.
While that might be the case, does it mean you should upgrade immediately or will you take into consideration other impacts you might encounter when upgrading? Depending on your needs, you could upgrade right away or you could play it safe and follow the forum closely to confirm with other users first.
Check the original discussion here.
Cheers!
-Kim