topic inter-compatibility in General Topics

inter-compatibility

ongkai — Sun, 23 Jan 2022 12:24:57 GMT

Hi All,

PA3020 and PA200 are used to form an IPSEC tunnel. Would there be any compatibility issue if we upgrade PA3020 to PANOS 9.1.12-h4 while keeping PA200 on PANOS 8.1.21?

Any known issues if we upgrade PA3020 to PanOS 9.1.12-h4? PA3020 Current PanOS: 8.1.20-h1

Re: inter-compatibility

kiwi — Thu, 27 Jan 2022 11:01:23 GMT

Hi @ongkai ,

That shouldn't be a problem. That said, please always check the release notes for known issues on the new OS version:

PAN-OS 9.1.12 Known Issues

Cheers,

-Kiwi.

Re: inter-compatibility

Adrian_Jensen — Thu, 27 Jan 2022 21:49:57 GMT

We just upgraded a couple PA-3020s from 8.1.20-h1 to 9.1.12 (we were advised by support not to go to the hotfix if we didn't have a problem). No problems with our IPSec tunnels after the upgrade.

Something that did bite us though.... 9.1 uses a new PAN-DB URL Filter provider and license, and the existing URL database is deleted on the upgrade. We use URL Filter block on "unknown" and "not-resolved" categories (default is allow). That meant that after the upgrade the PA could not download the new license or initial database... Had to find and change until the database was initialized.