topic Re: Upgrade / Downgrade PAN-OS in Web Proxy Discussions

Upgrade / Downgrade PAN-OS

Kakada_Sao16 — Wed, 29 Jan 2025 02:38:14 GMT

Dear PA Team,

Can you share the PA best practice of Upgrade PAN-OS?

In case the new upgrade not working stable or impact to operation how can we downgrade? Is there will the same existing config/policy after rollback?

All upgrade/downgrade rely on PA proxy (UI)? How to monitor via CLI during we perform activity?

Thanks,

Re: Upgrade / Downgrade PAN-OS

mshekh — Wed, 29 Jan 2025 03:29:28 GMT

Hi @Kakada_Sao16 ,

You can refer the below pan-os upgrade doc.

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os/upgrade-an-ha-firewall-pair

Regarding the monitoring the upgrade from CLI you can run the command show jobs id "refer the pan-os upgrade job id", it will show the progress in percentage like in GUI you see the job status from tasks.

If you face any issue with upgrade or post upgrade you may open case with support team to assist you with troubleshooting instead of reverting the PAN-OS version.

Re: Upgrade / Downgrade PAN-OS

Kakada_Sao16 — Wed, 29 Jan 2025 03:33:35 GMT

Thanks for your update @mshekh