https://live.paloaltonetworks.com/t5/next-generation-firewall/delaying-upgrade-between-an-ha-pair/m-p/1255459#M6951 <P>Does any successfully perform their HA firewall upgrades in this manner?</P> <P>&nbsp;</P> <P>1. Upgrade the Seconday(passive) firewall.</P> <P>2. Make Secondary firewall Active.</P> <P>3. Wait 1 or more days.</P> <P>4. Upgrade the Primary(now passive) firewall.</P> <P>5. Make the Primary firewall active.</P> <P>&nbsp;</P> <P>It would bring us a lot more comfort knowing that we can easily switch to a different firewall (on the older version) in the event of an issue caused by the upgrade. Will HA syncs still work(sessions, configs, etc) This could be for minor or major versions.</P> Thu, 04 Jun 2026 20:58:06 GMT jambulo 2026-06-04T20:58:06Z https://live.paloaltonetworks.com/t5/next-generation-firewall/delaying-upgrade-between-an-ha-pair/m-p/1255459#M6951 <P>Does any successfully perform their HA firewall upgrades in this manner?</P> <P>&nbsp;</P> <P>1. Upgrade the Seconday(passive) firewall.</P> <P>2. Make Secondary firewall Active.</P> <P>3. Wait 1 or more days.</P> <P>4. Upgrade the Primary(now passive) firewall.</P> <P>5. Make the Primary firewall active.</P> <P>&nbsp;</P> <P>It would bring us a lot more comfort knowing that we can easily switch to a different firewall (on the older version) in the event of an issue caused by the upgrade. Will HA syncs still work(sessions, configs, etc) This could be for minor or major versions.</P> Thu, 04 Jun 2026 20:58:06 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/delaying-upgrade-between-an-ha-pair/m-p/1255459#M6951 jambulo 2026-06-04T20:58:06Z