topic Re: Problem downgrade PAN-500 in General Topics

Problem downgrade PAN-500

DKanta — Tue, 20 Jun 2017 09:42:47 GMT

Hi all!

i am trying to downgrade a PA-500 from 7.1.7 to 5.0.X.

I have downgraded to 7.0.1, but i am nor allowed to downgrade to 6.1.0, when i upload the image file it says 'PanOS_500-6.1.0 already exists', but the only images present are 7.0.1 and 4.1.4 (or something similar).

Do you have some hints?

Regards,

Daniele

Re: Problem downgrade PAN-500

Remo — Tue, 20 Jun 2017 09:48:20 GMT

Hi @DKanta

May I first ask you why you want to downgrade to 5.0.x?

5.0.x has reached it's end-of-life date on november 13, 2016.

https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary

Regards,

Remo

Re: Problem downgrade PAN-500

DKanta — Tue, 20 Jun 2017 09:52:11 GMT

Hi @Remo

i have to downgrade it due to an activity for a customer having that version, later i will upgrade to 7.1.X

Regards,

Daniele

Re: Problem downgrade PAN-500

Remo — Tue, 20 Jun 2017 10:05:22 GMT

this could be difficult. Right now you already downgraded once, so the firewall changed to your backup partition where 7.0.x was installed. Now the backup partition still contains 7.1.x. Probably not the best idea (in your very special situation) was downgrading to 7.0.1. It may be is a bug in 7.0.1.

what you could try next:

reboot and try to download/upload 6.1.0 again
install 7.0.16 and then try again to go back to 6.1.x

PS: I don't know if such a downgrade marathon will work properly 😛

Re: Problem downgrade PAN-500

reaper — Tue, 20 Jun 2017 11:24:03 GMT

have you rebooted after the upgrade ?

have you verified if there's enough space available for the image to be uploaded (and unpacked) on your root partition? you may need to delete a couple maintenance releases to free up space

Re: Problem downgrade PAN-500

DKanta — Tue, 20 Jun 2017 12:09:28 GMT

Hi Reaper,

I have rebooted the firewall, and before start all this activity i did a factory reset.

This morning i have upgraded it to 7.0.16, as recommended by vsys_remo, but still i can't downgrade.

Regards,

Daniele

Re: Problem downgrade PAN-500

BPry — Tue, 20 Jun 2017 14:17:35 GMT

@DKanta,

Have you verified that you actually have enough room to download and unpack the image as Reaper stated, that's usually where I see errors like this. In addition I would try running a 'request system software check' on the cli and just verify that what you are seeing in the GUI is actually matching what you see in CLI.