topic Re: HA Upgrade Path 8.1 to 9.1 in General Topics

HA Upgrade Path 8.1 to 9.1

MikeSangray2019 — Thu, 10 Dec 2020 15:44:02 GMT

I have an HA pair of firewalls on 8.1. Do I need to upgrade both to 9.0 and then 9.1 or can I upgrade one all the way to 9.1 and then the second from 8.1. to 9.1?

Re: HA Upgrade Path 8.1 to 9.1

SutareMayur — Thu, 10 Dec 2020 17:14:22 GMT

Hi @MikeSangray2019 ,

As you're planning to upgrade from one feature release to later feature release, you can't skip installation of the feature release which is in the path. So in your case, you need to follow below upgrade path -

8.1-->9.0-->9.1.0 (Download Base Release)-->9.1.x (Download & Install Target Version)

Also it is recommended to install latest maintenance release in each release version before you install the base image of next feature release. So you can follow upgrade path given in below article.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/upgrade-to-pan-os-91/upgrade-the-firewall-to-pan-os-91/determine-the-upgrade-path.html

Hope it helps!

Re: HA Upgrade Path 8.1 to 9.1

MikeSangray2019 — Thu, 10 Dec 2020 17:46:57 GMT

I understand the path, my question is about HA.

Can I upgrade one of the firewalls all the way to 9.1 and then upgrade the second firewall to 9.1 or do I have to do one to 9.0, then the second to 9.0, and then upgrade to 9.1 on the first and then 9.1 on the second.

Re: HA Upgrade Path 8.1 to 9.1

SutareMayur — Thu, 10 Dec 2020 18:49:37 GMT

Hi @MikeSangray2019 ,

Apologies for my misunderstanding!

As per Palo Alto guidelines, if there is more than one version difference between HA gateways then it gives errors. And the error will be like 'Peer version too old'.