HA (active Passive) 10.1.X to 11.1.X upgrade path

G.Hernandez312135 — Fri, 24 Jan 2025 14:22:12 GMT

Hi,

I will upgrade a paranoma VM in 10.1.5 and a pair of managed firewalls in HA Active passive from the same verstion to 11.1.X

This guide indicates I need to go through every feature release when upgrading HA firewalls:

"When upgrading HA firewalls across multiple feature PAN-OS releases, you must upgrade each HA peer to the same feature PAN-OS release on your upgrade path before continuing. For example, you are upgrading HA peers from PAN-OS 10.2 to PAN-OS 11.1. You must upgrade both HA peers to PAN-OS 11.0 before you can continue upgrading to the target PAN-OS 11.1 release. When HA peers are two or more feature releases apart, the firewall with the older release installed enters a suspended state with the message Peer version too old."

source: https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os/upgrade-an-ha-firewall-pair

But this guide says i could go directly from 10.1.5 to 11.1.X

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os/determine-the-upgrade-path#id85bdf6f4-2e83-49f0-8525-3eb2163f2d2e

Could you please help me clarify the upgrade path for both panorama and firewalls from 10.1.5 to 11.1.X

heres another thread that went unanswered with the same question:

Paloalto FW HA(Active/Passive) OS Upgrade Procedure 10.1.X -> 11.1.X

Thanks!

topic HA (active Passive) 10.1.X to 11.1.X upgrade path in Next-Generation Firewall Discussions

HA (active Passive) 10.1.X to 11.1.X upgrade path