topic Re: Panorama Software Upgrade in General Topics

Panorama Software Upgrade

IanBroadway — Mon, 16 Mar 2020 09:08:36 GMT

Hi All,

Just wanted to confirm I have the process right.

We're running Panorama, M-100 appliance (32GB RAM), managing 3 pairs (6 no) of PA-3220 firewalls.

All currently running PAN-OS 8.1.5. Looking to upgrade to the next major stable release, currently listed as 9.0.6.

From what I have read, upgrade path is, Panorama first, 8.1.5 > 9.0.0 > 9.0.6, is this correct?

Once this is complete, same upgrade path for the physical firewalls, albeit the process relevant to your physical deployment i.e. ha active/standby process.

Ian

Re: Panorama Software Upgrade

kiwi — Mon, 16 Mar 2020 09:41:02 GMT

Hi @IanBroadway ,

Yup that's pretty much it.

Cheers !

-Kiwi.

Re: Panorama Software Upgrade

IanBroadway — Mon, 16 Mar 2020 09:51:22 GMT

Great thanks for confirming.

Re: Panorama Software Upgrade

IanBroadway — Wed, 18 Mar 2020 12:20:57 GMT

Sorry, I have been having a read of this article

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRrCAK

It would appear based on this I should be able to go from 8.1.5 > 9.0.6 direct?

Re: Panorama Software Upgrade

SutareMayur — Wed, 18 Mar 2020 12:48:49 GMT

@IanBroadwayYes you can go to directly 9.0.6 from 8.1.5 but only thing you need to keep base version 9.0 downloaded. Once Base version is downloaded, then download target version and install it.

It is recommended path when moving from one feature release to the next is to download the base image for the next feature release version and then download and install your target maintenance release version. You must have both the base image and the maintenance release image on the firewall for installation to be successful.

Hope it helps!

Mayur

Re: Panorama Software Upgrade

robertocol — Mon, 19 Feb 2024 11:18:58 GMT

@SutareMayur Hi, i'm trying to figure how to do the same with Panorama software deployment as panorama Use to push the firmware downloaded to panorama repository to the device and install it.
Pheraps have to push the base version checking "upload only without install" and then push and install the target maintenance ? Or there's a better feature to do this at once?