Old 4020 box running 5.x code.

tech_geek2023 — Thu, 01 Feb 2024 07:01:55 GMT

Team,

We have a old 4020 box running the Palo Alto 5.x code. We are looking to upgrade this to 10.x and wanted to know the best path recommended for this upgrade.

Thanks!

Re: Old 4020 box running 5.x code.

kiwi — Thu, 01 Feb 2024 11:32:46 GMT

Hi @tech_geek2023 ,

You can't run 10.x on a PA-4020. The latest PAN-OS version you can run on a PA-4020 is v7.1:

https://www.paloaltonetworks.com/services/support/end-of-life-announcements/hardware-end-of-life-dates

I'm not sure if you can still find the necessary PAN-OS versions to upgrade to 7.1 ... but the upgrade path from 5.0.x would be 5.1 (Panorama only) > 6.0 > 6.1 > 7.0 > 7.1 .

For each upgrade to a new major version you should download the base version first and then download/install the latest version before moving forward with the next one. As explained here for 10.1:

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os/determine-the-upgrade-path

I'm not sure if you can still find versions prior to 7.1 on the support portal ... you might have to reach out to TAC.

Kind regards,

-Kim.

topic Old 4020 box running 5.x code. in General Topics

Old 4020 box running 5.x code.

Re: Old 4020 box running 5.x code.