Downgrade of Active - Passive PA-220 HA Pair

G.Blake — Thu, 05 Dec 2024 17:32:15 GMT

We have a pair of PA -220 (Active - Passive)

Currently on 10.2.11

The customer want to downgrade these back to the 10.1 Feature Release.

They were on 10.1.13 earlier in the year, before we upgraded them to 10.2.9-h1 and then again to 10.2.11 to try and fix an issue with disk space etc.

I just want to double check the downgrade instructions.

Enable Config Sync & Preemptive is Configured on both FWs. I should disable both of these on both FWs and commit the change ?

So I select the 10.1.13 and select the config backup for this.

Then when it comes back, I then failover to this device, and downgrade the other device, again selecting the config backup.

Then we can upgrade to 10.1.14-h6 (preferred release) ?

Although I am being encouraged to upgrade to 10.1.13-h5 instead because of bug PAN-268823

Re: Downgrade of Active - Passive PA-220 HA Pair

Ashish_Kushwaha — Fri, 06 Dec 2024 05:01:05 GMT

It's better to open a support case for a downgrade, but it's usually recommended to upgrade instead of downgrade.