topic Re: Downgrade from 9.1.12.h3 version to 9.1.9 in General Topics

Downgrade from 9.1.12.h3 version to 9.1.9

vishal_07 — Wed, 12 Jan 2022 20:29:50 GMT

Hi All,

I have decided to upgrade my Palo Alto 850 from version 9.1.9 to 9.1.12.h3 but after the secondary Palo Alto upgrade facing an issue where interface are not getting up so my team decided to roll back to version 9.1.9. Should my configuration completely wiped out if i downgrade my device ? or if no then what are the precaution i have to take for downgrade procedure.

Also i have got below link for downgrade steps, Pls let me know can i follow this link for my case.

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-new-features/upgrade-pan-os/downgrade-pan-os/downgrade-a-firewall-to-a-previous-maintenance-release.html

Re: Downgrade from 9.1.12.h3 version to 9.1.9

OtakarKlier — Wed, 12 Jan 2022 22:11:17 GMT

Hello,

No, a roll back should not wipe the config. However I always say its good to backup the configuration on a periodic basis.

Regards,

Re: Downgrade from 9.1.12.h3 version to 9.1.9

vishal_07 — Thu, 13 Jan 2022 05:41:44 GMT

Thank you Otakar for your reply and clearing my Doubt.

Can you help me to know is it named config and device state is enough for recovery of config if anything is gone wrong.

Re: Downgrade from 9.1.12.h3 version to 9.1.9

OtakarKlier — Thu, 13 Jan 2022 20:33:48 GMT

Hello,

You can just download the 'Configuration Version' and select the newest one. The xml file contains everything you need to restore to a new system.

Regards,

Re: Downgrade from 9.1.12.h3 version to 9.1.9

BPry — Fri, 14 Jan 2022 01:11:32 GMT

@vishal_07,

Just as an FYI, the downgrade article that you linked actually isn't how I would recommend reverting from a failed upgrade. It'll work perfectly fine, but you don't need to "re-install" the maintenance release to do so. The firewall actually has two partitions (three including the maintenance partition). When you install a new update, what you're doing is actually installing the image on the other partition.

You can reference THIS KB going forward, but the software manager (swm) can be utilized to "revert" to the old installation that you were literally just running without any issue. You essentially just return to the old partition.

Re: Downgrade from 9.1.12.h3 version to 9.1.9

vishal_07 — Fri, 14 Jan 2022 04:05:33 GMT

Hi Bpry,

It was not a failed upgrade but need to revert back from 9.1.12-h3 to 9.1.9 as customer wants. So I think Direct reinstalling last image would be a perfect step without any issue.