topic Re: Downgrade Pan OS in General Topics

Downgrade Pan OS

jdprovine — Tue, 18 Dec 2018 21:53:41 GMT

Does the debug svm revert still work on the 8 os?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcYCAS

Re: Downgrade Pan OS

BPry — Wed, 19 Dec 2018 04:21:14 GMT

It's debug swm revert; technically this is really just activating the other partition on the system, so while its most commonly used to downgrade PAN-OS it isn't specific to downgrading the software. However, to answer your question this still works perfectly fine and likely isn't a command that will change.

Re: Downgrade Pan OS

kiwi — Wed, 19 Dec 2018 12:30:22 GMT

@jdprovine,

Yup it's still there in PAN-OS 8.1.x as BPry already mentioned :

admin@PA-lab> show system info

...

sw-version: 8.1.2

...

admin@PA-lab> debug swm revert               [revert back to last successfully installed software]

Cheers !

-Kiwi.

Re: Downgrade Pan OS

jdprovine — Wed, 19 Dec 2018 13:53:49 GMT

@kiwi @BPry

Okay cause when I tried it on my test PA with 8 on it, it gives me an invalid syntax error

Re: Downgrade Pan OS

reaper — Wed, 19 Dec 2018 14:03:36 GMT

To add to @BPry and @kiwi

you will want to check what revertable option is available to you (> debug swm status😞 you can revert to the last version that was 'installed' on the secondary partition

if you followed a linear upgrade path and did not install the next version yet, you will be able to revert to the previous version

if you already installed the _next_ version in line, you will not technicvally be able to 'revert' as the revert action would actually move you forward

ie. before installing 8.1.5:

admin@PA-200> debug swm status

Partition         State             Version
--------------------------------------------------------------------------------
sysroot0          RUNNING-ACTIVE    8.1.2
sysroot1          REVERTABLE        8.1.1
maint             EMPTY             None

after installing but before rebooting:

admin@PA-200> debug swm status

Partition         State             Version
--------------------------------------------------------------------------------
sysroot0          RUNNING-ACTIVE    8.1.2
sysroot1          PENDING-REVERT    8.1.5
maint             EMPTY             None

Re: Downgrade Pan OS

jdprovine — Wed, 19 Dec 2018 14:21:19 GMT

@reaper @kiwi @BPry

go figure now its working LOL

debug svm status

Partition State Version
--------------------------------------------------------------------------------
sysroot0 RUNNING-ACTIVE 8.1.5
sysroot1 REVERTABLE 8.1.4
maint EMPTY None

jprovine@PA220-test-mgt> debug swm revert

Reverting from 8.1.5 (sysroot0) to 8.1.4 (sysroot1)

Re: Downgrade Pan OS

jdprovine — Wed, 19 Dec 2018 16:27:00 GMT

@reaper @kiwi @BPry -

oops its a typo svm instead of swm

jprovine@PA220-test-mgt> debug svm status

Invalid syntax.
jprovine@PA220-test-mgt> debug svm status

Re: Downgrade Pan OS

reaper — Wed, 19 Dec 2018 16:53:55 GMT

Did you let auto commit complete?
It may take a moment for swm to become available

Re: Downgrade Pan OS

jdprovine — Wed, 19 Dec 2018 19:03:31 GMT

@reaper

It was a typo on my part I entered svm instead of swm LOL 😉