topic Re: PAN-OS 7.1 Resource List in General Topics

PAN-OS 7.1 Resource List

craig.pearson — Mon, 05 Jun 2017 05:54:04 GMT

Hi,

I am looking to upgrade Panorama and firewalls from version 7.0.8 to version 8.0.2. Is there a requirement to upgrade PA and all firewalls to 7.1.0 prior to moving to 8?

My main concern is if i am able to manage firewalls with 7.0.8 from Panorama running 8.0.2

Many thanks

Craig

Re: PAN-OS 7.1 Resource List

TranceforLife — Mon, 05 Jun 2017 09:27:34 GMT

Hi,

https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os-release-notes/pan-os-7-0-release-information/associated-software-versions.html

Re: PAN-OS 7.1 Resource List

craig.pearson — Tue, 06 Jun 2017 03:22:58 GMT

Thank you. So managing firewalls will work correctly if they are 7.0.8 and Panorama 8.0.2?

Also, when updating clustered (HA) firewalls, is it recommended to update both to 7.1.0 before moving to 8.0.2, or am I safe to move them to 8.0.2 one at a time?

Many thanks

Re: PAN-OS 7.1 Resource List

reaper — Tue, 06 Jun 2017 07:15:29 GMT

Hi @craig.pearson

Here's the best practices guide 🙂 Best Practices for PAN-OS Upgrade

If you have downtime scheduled and intend to 'end up' with both the firewalls on the same version at the end of your maintenance window, you can do one at a time. If your question was to let one member be on 7.0 for a longer period of time, I'd recommend upgrading both peers so you will still have a functional cluster versus having one firewall be non-functional and the other (7.0) needing to be suspended for you to be able to test the 8.0 peer (by default a cluster elects the peer with the lowest PAN-OS as the active member)