topic Re: Upgrade PanOS to 9.1 from 8.1 in General Topics

Upgrade PanOS to 9.1 from 8.1

Networking2017 — Thu, 10 Mar 2022 20:43:51 GMT

Hey all. I've come up wtih an upgrade plan to get us from 8.1.10 to 9.1.12-h3 based on reading resources.

I would love some feedback on whether this is the correct process.

THanks much.

8.1.10 Current SoftWare Version

5.2.8 Global Protect Version

Firewall A = currently active firewall, firewall B = currently passive firewall)

Download PAN-OS 8.1.21-h1 to both firewalls
Install 8.1.21-h1 and reboot firewall B
Download PAN-OS 9.0.0 to firewall B
Download PAN-OS 9.0.13, install it and reboot firewall B
Install PAN-OS 8.1.21-h1 on firewall A and reboot (when you click reboot a failover is done to firewall B)
Download PAN-OS 9.0.0 to firewall A
Download PAN-OS 9.0.13, install it and reboot firewall A
Download PAN-OS 9.1.0 to both firewalls
Download PAN-OS 9.1.12-h3 to both firewalls
Install PAN-OS 9.1.12-h3 on firewall A and reboot (when you click reboot a failover is done to firewall B)
Install PAN-OS 9.1.12-h3 on firewall B and reboot
To make sure that you can downgrade in case of any problems export the configuration at all of the following steps on both firewalls:

Re: Upgrade PanOS to 9.1 from 8.1

TomYoung — Fri, 11 Mar 2022 01:31:24 GMT

Hi @Networking2017 ,

That upgrade plan looks good. It is a good idea to review this doc -> https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/upgrade-to-pan-os-91/upgrade-the-firewall-to-pan-os-91/upgrade-an-ha-firewall-pair-to-pan-os-91.html .

Thanks,

Tom

Re: Upgrade PanOS to 9.1 from 8.1

Networking2017 — Tue, 22 Mar 2022 14:59:03 GMT

thanks for the feedback and link.

Re: Upgrade PanOS to 9.1 from 8.1

S_Alad — Thu, 05 May 2022 12:50:32 GMT

Planning upgrade later in the year. Thanks