About upgrade an HA configuration

Y.Narita347153 — Wed, 06 Aug 2025 09:01:04 GMT

Hello Team,

Standalone PAs can be upgraded by skipping multiple versions starting with 10.1.

Is this skip feature supported for HA?

I checked the documentation, but I couldn't find anything that clearly stated that it was supported in an HA configuration.

HA configurations didn't work if the minor versions were more than two apart.

However, it now appears that the HA configuration can be maintained even when using the skip feature.

Does anyone know of any documentation that clearly states the skip feature for HA configurations?

Regrads,

Re: About upgrade an HA configuration

fabioaquino — Thu, 07 Aug 2025 01:33:39 GMT

Hi, Narita347153,

the first thing you should ask yourself is, what functions do I need? Do the features I have today suit me? Will the box support the latest mature version?
You can't jump from version 9.0 to 10.2, for example, in which case the ideal is to upgrade to 9.1, then 10.0, then 10.1 and then 10.2. If you're on 10.0, then you can go straight to 10.2 without going through 10.1, but you need to have the base version (10.0) downloaded.

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os/upgrade-an-ha-firewall-pair

As for the ignore feature, I can't tell you. I've never heard of it.

topic About upgrade an HA configuration in Next-Generation Firewall Discussions

About upgrade an HA configuration

Re: About upgrade an HA configuration