topic Re: If downgrade PA820 OS from 9.04 to 8.1.16, configuration still valid? in General Topics

If downgrade PA820 OS from 9.04 to 8.1.16, configuration still valid?

herman2018 — Tue, 08 Sep 2020 12:54:42 GMT

Hi, If downgrade PA820 OS from 9.04 to 8.1.16, will the configuration be still valid? any impact to the configuration?

we just use normal security firewall rules, not enable Sd-WAN. Anyone can please advise, thanks in advance!

Re: If downgrade PA820 OS from 9.04 to 8.1.16, configuration still valid?

SutareMayur — Tue, 08 Sep 2020 14:11:05 GMT

@herman2018,

This shouldn't caused any issues with the configuration. But as a precautionary action, you should take running configuration backup of gateways and/or Panorama on your local system.

Please refer below article -https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/upgrade-to-pan-os-90/downgrade-from-pan-os-90/downgrade-a-firewall-to-a-previous-feature-release.html for getting more clarity.

Also you can refer below article to know best practices for downgrading PANOS.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRrCAK#anchor7 Refer Point - 7. Downgrade Procedure.

Hope it helps!

Re: If downgrade PA820 OS from 9.04 to 8.1.16, configuration still valid?

herman2018 — Tue, 08 Sep 2020 18:23:45 GMT

Thanks @SutareMayur , sorry, ask you one more question, what is downgrade path? can downgrade from 9.04 to 8.16 directly? or 9.04 --> 9.0 --> 8.16 ? or 9.04 -> 9.0 -> 8.1.0 -> 8.1.16? Please advise, thanks a lot!

Re: If downgrade PA820 OS from 9.04 to 8.1.16, configuration still valid?

SutareMayur — Wed, 09 Sep 2020 06:00:33 GMT

@herman2018,

As you are going to downgrade from 9.0.4 to 8.1.16,

1. Make sure that base image 8.1.0 is still downloaded on the firewall. If not, first download base image on the firewall. If firewalls are in HA, keep base image downloaded on both firewalls.

2. Now download and install preferred image i.e. 8.1.16 and then reboot system to complete the installation.

For this also, you can refer best practices given in article shared in my last response. Sharing same here also. Refer Point 7. Downgrade Procedure.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRrCAK#anchor7

Hope it helps!

Mayur Sutare

Re: If downgrade PA820 OS from 9.04 to 8.1.16, configuration still valid?

herman2018 — Wed, 09 Sep 2020 06:46:23 GMT

Thanks a lot @SutareMayur !