topic Re: PA-7050 Firewall Upgrade in Next-Generation Firewall Discussions

PA-7050 Firewall Upgrade

NickoKristian — Fri, 03 May 2024 02:36:34 GMT

Hi All,

We are kind of confused on 2 documentations below.

We are planning to upgrade PA-7050 Firewall. Our initial Target version is 10.2.8-h3 because document 1 says it is possible.

BUT document 2 is saying this specific model is supported up until 10.1.X only.

Links are below.

Any Insights?

Document 1: https://docs.paloaltonetworks.com/compatibility-matrix/supported-os-releases-by-model/palo-alto-networks-next-gen-firewalls#id9680433e-055f-4f38-a7d0-6d31e7d557bc

Document 2: https://www.paloaltonetworks.com/services/support/end-of-life-announcements/hardware-end-of-life-dates.html

Regards

Nicko

##Upgrad

Re: PA-7050 Firewall Upgrade

rmfalconer — Fri, 03 May 2024 15:16:12 GMT

The EOL announcements are specific to certain components, not the entire system. You'll need to evaluate if you have anything that's EOL.

Re: PA-7050 Firewall Upgrade

NickoKristian — Mon, 06 May 2024 04:56:05 GMT

Hi @rmfalconer ,

We are using 7050, EOL stated is February 28, 2026(This is on document 2) it is also stated on document 2 that 10.1 is the last supported OS.

On document 1 versions 10.2.0 and up are listed as supported. So what do you think is true?

Re: PA-7050 Firewall Upgrade

rmfalconer — Mon, 06 May 2024 14:58:32 GMT

What modules do you have installed? It looks like there are specific modules that only go to 10.1.

Re: PA-7050 Firewall Upgrade

NickoKristian — Tue, 07 May 2024 02:05:40 GMT

Can't see any documentations on the module you are saying. can you share the link

Re: PA-7050 Firewall Upgrade

rmfalconer — Tue, 07 May 2024 03:08:31 GMT

PA-7000 Series Firewall Module and Interface Card Information (paloaltonetworks.com)

Re: PA-7050 Firewall Upgrade

msyeedrafiqi — Tue, 07 May 2024 08:04:16 GMT

Pa-7050 support all the Pan-OS
https://docs.paloaltonetworks.com/compatibility-matrix/supported-os-releases-by-model/palo-alto-networks-next-gen-firewalls.

You can still go to software update and click on check now you will get all the OS which are supported.

Re: PA-7050 Firewall Upgrade

NickoKristian — Wed, 08 May 2024 00:32:11 GMT

But this says it is supported only up until 10.1 versions.

https://www.paloaltonetworks.com/services/support/end-of-life-announcements/hardware-end-of-life-dat...

Does it mean that if it has issues when we upgrade to 10.2 Palo alto will not support us?

Re: PA-7050 Firewall Upgrade

rmfalconer — Wed, 08 May 2024 03:52:27 GMT

That's not what it says. It says that certain components in the 7050 are EOL and have limited software support.

As an example from the documentation:

There are two SMC models: the first-generation SMC (PA-7050-SMC and PA-7080-SMC) and the second-generation SMC (PA-7050-SMC-B and PA-7080-SMC-B). The SMC is supported on PAN-OS versions up to PAN-OS 10.1. The SMC-B is supported on PAN-OS 9.0 and later versions

if you have the first generation, it only goes to 10.1. If you have second generation, it will continue to be supported. You need to determine what components you have in your firewall to see what's supported on 10.2+.

Re: PA-7050 Firewall Upgrade

NickoKristian — Wed, 08 May 2024 04:59:52 GMT

Thanks for clarification

Last question, would the output for the command show system info provide the detail needed to identify which specific model?

Re: PA-7050 Firewall Upgrade

rmfalconer — Wed, 08 May 2024 05:15:15 GMT

I think it's show chassis inventory.