7.01 and certs

jdprovine — Tue, 28 Jun 2016 13:34:58 GMT

I am looking for the article that says that you cannot upgrade directly to anything past 7.01 without breaking certs.

Re: 7.01 and certs

Anon1 — Tue, 28 Jun 2016 14:58:05 GMT

There is a warning in the release notes up to 7.0.7:

https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os-release-notes/pan-os-7-0-7-addressed-issues#15708

Before you upgrade to PAN-OS 7.0.3 or a later PAN-OS 7.0 release, review the information about how to upgrade a firewall to PAN-OS 7.0. Additionally, if virtual system (vsys) configuration is not enabled on your firewall or appliance, you must reboot your firewall or appliance after you install PAN-OS 7.0.1 and before you upgrade to PAN-OS 7.0.3 or a later release.

This should be fixed with 7.0.8 though:

90982: Fixed an issue where upgrading from a PAN-OS 6.1 release to PAN-OS 7.0.3 or a later PAN-OS 7.0 release caused the GlobalProtect portal or gateway and SSL decryption processes to stop responding. This issue occurred because SSL/TLS Service Profiles (introduced in PAN-OS 7.0) were not created successfully if you did not enable multiple virtual system (multi-vsys) functionality on the firewall. With this fix, SSL/TLS Service profiles are now successfully created on non-multi-vsys platforms when upgrading to PAN-OS 7.0.8 or later releases or to PAN-OS 7.1 releases.

topic 7.01 and certs in General Topics

7.01 and certs

Re: 7.01 and certs