topic how to disable the sequence check when downloading PANOS version via Ansible in Next-Generation Firewall Discussions

how to disable the sequence check when downloading PANOS version via Ansible

QuDong — Wed, 23 Apr 2025 09:10:17 GMT

playbook - hosts: "xxxxx" connection: local vars: device: ip_address: '{{ ansible_host }}' username: '{{ ansible_user }}' password: '{{ ansible_password }}' version: 11.1.0 tasks: - name: Download PAN-OS version paloaltonetworks.panos.panos_software: provider: '{{ device }}' version: '{{ version }}' download: true perform_software_check: false FAILED! => {"changed": false, "msg": "Version Sequence is invalid: 10.1.13-h1 -> 11.1.0"}

Re: how to disable the sequence check when downloading PANOS version via Ansible

SimonT — Mon, 30 Jun 2025 05:24:06 GMT

Hi just edit panos_policies.py and add this:

# Upgrade major version (10.2.0 -> 11.1.0) elif (current.major + 1 == target.major) and (target.minor == 1): return True

@JimmyHolland

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os/determine-the-upgrade-path