Read The Damn Release Notes

I made a post about this on our forums (first post on the forums actually haha) but decided I needed to make a front page post. Please save yourselves the heart ache and grief and just read the damn release notes before you upgrade firmware versions. Technician friend of mine apparently doesn’t like reading too much. Either way, he took a firewall straight to 5,4,1 from an unsupported firmware upgrade path. Yeah, I know, 5.4.1, too early for production, I get that….but the issues he is experiencing are due to his lack of release note reading.

 

So PLEASE save yourself the trouble and pain and just read and follow the release notes!

This entry was posted in Tips and Tricks and tagged , on by .

About Mike

Michael Pruett, CISSP has a wide range of cyber-security and network engineering expertise. The plethora of vendors that resell hardware but have zero engineering knowledge resulting in the wrong hardware or configuration being deployed is a major pet peeve of Michael's. This site was started in an effort to spread information while providing the option of quality consulting services at a much lower price than Fortinet Professional Services. Owns PacketLlama.Com (Fortinet Hardware Sales) and Office Of The CISO, LLC (Cybersecurity consulting firm).

3 thoughts on “Read The Damn Release Notes

  1. Hugo Pereira

    Regarding the “too early for production” thing; how early is too early in your opinion? I manage a few big FGs here in Norway and was under the impression (coming from Cisco) that GA is plenty good enough. Leaned the hard way when I used 5.4.0. I still deal with some minor bugs now 5.4.2 and 5.4.3.

    In your experience, how long should I wait to move onto new releases? Like you, I’m very looking forward to 5.6. How many minor updates after GA would you wait before giving 5.6 a shot?

    Reply
    1. Mike Post author

      I tend to be……overzealous. This means I tend to push to the latest and greatest as soon as possible, issues be damned.

      I wouldn’t touch 5.6 GA though unless it is a home or test unit. I would wait until 5.1 so they can get mass found bugs out of the way. No matter how hard they beta test it they won’t see the variation in device/configuration combinations until they move it to GA for the masses. Which means they wont know of the big ugly bugs that are hidden in plain sight until then either.

      Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.