topic PAN-OS Upgrade in General Topics

PAN-OS Upgrade

biswa1981 — Thu, 15 Feb 2018 09:29:35 GMT

Hi, I want to upgrade PAN OS version 7.0.5-h5 to 7.1.14, so what the versio steps , or can I directly install to 7.1.14?

Re: DotW: PAN-OS Upgrade

Remo — Wed, 14 Feb 2018 19:55:40 GMT

As per current upgrade recommendation:

Download and install 7.1.0
Reboot
Downloaf and install 7.1.14
Reboot

These steps are required to make sure that you don't run into problems with PAN-OS Upgrades that get too big because then the firewall does not need to combine the base and minor image into one upgrade package.

Re: PAN-OS Upgrade

reaper — Thu, 15 Feb 2018 09:35:35 GMT

please check out this article that highlights upgrade best practices: https://live.paloaltonetworks.com/t5/Featured-Articles/Best-Practices-for-PAN-OS-Upgrade/ta-p/111045

the process is indeed as @Remo explains

download and install base, reboot is not required for the 7.1 base (it does become recommended in 8.0)
download and install maintenance version,
reboot

Re: PAN-OS Upgrade

Feldiasti — Thu, 15 Feb 2018 10:01:14 GMT

PAN-OS 7.1 Policy behavior change application-default In PAN-OS 7.1:

when a security policy rule is configured with the Application setting 'Any' and the Service setting 'application-default', the rule Action is now applied only on the standard ports for any application. For example, if a security policy rule is configured to allow any application traffic on the default application ports, web-browsing is allowed only on port 80. In earlier PAN-OS release versions, the Service setting 'application-default' was not enforced when configured with the Application setting Any.

As per my experiance i had changed all of security policy rules were configured with the Application Service setting 'application-default' to any to.

https://live.paloaltonetworks.com/t5/Configuration-Articles/PAN-OS-7-1-Policy-behavior-change-application-default/ta-p/75664

https://live.paloaltonetworks.com/t5/Learning-Articles/Tips-amp-Tricks-What-Does-Application-default-Under-Service-Mean/ta-p/54167

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os-release-notes/pan-os-7-1-release-information/changes-to-default-behavior