topic Firmware upgrade ver from 10.2.10 to 11.1.x. in General Topics

Firmware upgrade ver from 10.2.10 to 11.1.x.

S.Sinha133327 — Tue, 07 Jan 2025 10:30:17 GMT

Hi Support,

Our organization is in the process of upgrading the firmware of Palo Alto 460. We are now on 10.1.10. We would like to upgrade to 11.1.x. I would like to know which is the recommended version. There is always a dilemma of which version is the best and have minimum vulnerabilities. By reading various documents it is more confusing to understand which version is the best as there are always many vulnerabilities in every version which are not addressed.

Which version you would suggest if I have to choose between 11.1.4 / 11.1.5 / 11.1.6

Your early response is appreciated.

Thanks,

Sanjay

Re: Firmware upgrade ver from 10.2.10 to 11.1.x.

kiwi — Tue, 07 Jan 2025 10:55:08 GMT

Hi @S.Sinha133327 ,

You can always check the Support PAN-OS Release Guidance page:
https://live.paloaltonetworks.com/t5/customer-resources/support-pan-os-software-release-guidance/ta-p/258304

There you will find the preferred release for each PAN-OS train (marked by P).

In this case 11.1.4-h7 is the preferred version for PAN-OS 11.1.x

If you ABSOLUTELY need a fix which was addressed in a newer version then you can use that one of course ... just be aware that newer versions are still being monitored and could potentially have unreported bugs.

Kind regards,

-Kim.

Re: Firmware upgrade ver from 10.2.10 to 11.1.x.

S.Sinha133327 — Tue, 07 Jan 2025 12:44:32 GMT

Hi,

I can see there is a bug reported and not fixed in 11.1.4-h7 related to GlobalProtect which can impact our users. This bug is fixed in 11.1.5.

Please let me know if we go with 11.1.5 or 11.1.6 ?

Thanks,

Sanjay

Re: Firmware upgrade ver from 10.2.10 to 11.1.x.

D.Dang335864 — Wed, 08 Jan 2025 19:57:47 GMT

We just upgraded to the recommended stable version 11.1.4-h7. So far with no issue.

Re: Firmware upgrade ver from 10.2.10 to 11.1.x.

S.Sinha133327 — Fri, 10 Jan 2025 09:07:47 GMT

Successfully upgraded to 11.1.4-h7. No issues reported.

Thanks,

Sanjay

Re: Firmware upgrade ver from 10.2.10 to 11.1.x.

gbankit — Sat, 11 Jan 2025 09:33:13 GMT

Dear all , I can directly upgrade 10.2.7 to 11.1.4h7 please which patch is the best for 10.2.7 to 11.1.4.h7

Thanks

Re: Firmware upgrade ver from 10.2.10 to 11.1.x.

kiwi — Mon, 13 Jan 2025 08:52:18 GMT

Hi @gbankit ,

You can follow the correct path here:

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os/determine-the-upgrade-path

Kind regardsm

-Kim.