topic Re: Panorama OS compatibility in General Topics

Panorama OS compatibility

Bijesh — Tue, 14 Jun 2022 07:30:30 GMT

Hi Team,

I am planning to upgrade Panorama software version from 9.1.13 to 10.1.*. But the i am confused whether the Panorama with OS 10.1.* can manage PA3020 running on PAN OS 9.1.* and PA450 running on PAN OS 10.1. *?

Re: Panorama OS compatibility

PavelK — Tue, 14 Jun 2022 08:52:58 GMT

Hello @Bijesh

after you upgrade Panorama to 10.1, you will be able to manage all Firewalls running older version of PAN-OS. As long as Panorama is running the same or higher version than managed Firewall, it is going to be compatible.

Kind Regards

Pavel

Re: Panorama OS compatibility

aleksandar.astardzhiev — Wed, 15 Jun 2022 09:42:28 GMT

Hi @Bijesh,

I can agree with what @PavelK said with one clarification. Although there is no official support matrix for Panorama, it seems Panorama cannot support "difference bigger than a major release" (exact words from PAN support engineer). So Panorama cannot support all earlier version, there is a limit. I wish only Palo Alto to public official guide for that limitation.

Couple of months ago we tried to onboard FW running 9.0 on Panorama running 10.1, but it was failing to commit on the FW. PAN support engineer explained that Panorama was pushing config for 9.1, which firewall obviously was failing to commit. The only solution was to upgrade FW to 9.1, as it was the lowest supported version by Panorama running 10.1.

So I can confirm that Panorama 10.1 can manage without issues FWs running 9.1 and above