topic Re: OS upgrade rollback from 7 in General Topics

OS upgrade rollback from 7

jdprovine — Tue, 12 Apr 2016 12:52:35 GMT

I am currently on version 6.1.10 and when I upgraded to it in March I was told by TAC that is was currently the most stable version. I am looking at what it would take to move up to the most stable version of 7 but first I want to figure out the best way to roll back the upgrade should it not go well, I am assuming its not as easy as re-installing 6.1.10 because there are now major feature changes. Has anyone had to roll back, how did you do it and how hard was it?

Re: OS upgrade rollback from 7

AlexZu — Tue, 12 Apr 2016 18:17:59 GMT

It should be that easy. We move between version on our dev firewalls when testing new versions before deploying without issues.

Here is a link from PA regarding downgrading:

https://www.paloaltonetworks.com/documentation/70/pan-os/newfeaturesguide/upgrade-to-pan-os-7-0/downgrade-to-a-previous-feature-release

Re: OS upgrade rollback from 7

jdprovine — Tue, 12 Apr 2016 18:40:55 GMT

That is awesome thanks and remember bumbles bounce

Re: OS upgrade rollback from 7

reaper — Wed, 13 Apr 2016 13:00:02 GMT

To roll back to the previously installed software version, you can use the below command to activate the currently inactive system volume

> debug swm revert

the hardware has 2 partitions reserved for the operating system of which there is only 1 active at a time, the swm command allows you to manipulate the bootlader so it loads the previosuly installed operating system upon reboot by simply opening up the other partition

you can check your current status with this command:

> debug swm status

Partition         State             Version
--------------------------------------------------------------------------------
sysroot0          REVERTABLE        7.0.5
sysroot1          RUNNING-ACTIVE    7.1.0
maint             READY             7.1.0

Re: OS upgrade rollback from 7

jdprovine — Wed, 13 Apr 2016 13:10:26 GMT

Awesome reaper now I have three methods, my SE said I could take a back up of the config prior to the upgrade and load it back on the PA. Another engineer said that I could take a snapshot of the config prior to the ugrade and rollback to it

Re: OS upgrade rollback from 7

jdprovine — Wed, 31 Jan 2018 14:51:11 GMT

@reaper

Apparently we have discussed this before, too bad my little and old pea brain doesn't retain everything like it used too LOL