topic Re: Content updates compatibility with firmware in General Topics

Content updates compatibility with firmware

vishal_07 — Thu, 22 Jul 2021 13:27:14 GMT

Hello All,

PA 850 has been delivered at my office with firmware version 9.1.4 and my company has also purchased Threat Prevention, PAN DB Url Filtering & Wildfire Subscription license. Basically i need to upgrade my device to latest firmware of 10.0.x maintenance version with content updates compatible to this.

I have checked many sites on google but didnt found any article which describes my Content updates (Threat Prevention, Pan DB Url Filtering & Wildfire Subscription) compatibility with my target OS version.

Can anyone please help me regarding this

Re: Content updates compatibility with firmware

kiwi — Thu, 22 Jul 2021 17:25:40 GMT

Hi @vishal_07 ,

Content updates are mainly chassis dependent. They can be PAN-OS dependent but that's usually only an issue if you upgrade from a really really REALLY old version that's usually no longer supported anyway.

Just do a 'Check for new Version' and you should see all the versions available that are compatible for your device.

Hope it helps,

-Kiwi.

Re: Content updates compatibility with firmware

BPry — Thu, 22 Jul 2021 17:35:03 GMT

@vishal_07,

The only time you really need to be concerned about what content updates are applied are when you perform major updates, and the requirement will be listed in the release notes under the "Associated Software and Content Versions" section. So for PAN-OS 10.0 the only requirements from a content update aspect is that Application and Threats needs to be at least 8332.

If you follow best practice you should have a schedule for performing dynamic updates automatically so this never really becomes an issue; however if you aren't, they version requirement will always be listed in the release notes.

Re: Content updates compatibility with firmware

vishal_07 — Fri, 23 Jul 2021 09:24:02 GMT

Thanks Man. Will Surely Check

Re: Content updates compatibility with firmware

vishal_07 — Fri, 23 Jul 2021 09:25:27 GMT

Thanks for your reply.

So i can assume i can go from Pan OS 9.1.4 to 10.0.x version without considering the Content update version. Pls confirm

Re: Content updates compatibility with firmware

vishal_07 — Fri, 23 Jul 2021 09:31:38 GMT

Hello ,

I have checked but i didnt find the Pan DB Url Filtering & Wildfire compatible version with Pan-OS 10.0.x. Can you please put some light on it.

Re: Content updates compatibility with firmware

vishal_07 — Mon, 16 Aug 2021 05:10:22 GMT

Hello Kiwi,

One last question Can i upgrade my Palo Alto from 9.1.4 to 9.1.9 directly. As i think being upgrading just the maintainance version i dunt need to consider Content updates.

Re: Content updates compatibility with firmware

BPry — Mon, 16 Aug 2021 17:59:01 GMT

@vishal_07,

You can update directly from 9.1.4 to 9.1.9 without issue. For version requirements on any PAN-OS software release you simply need to read the published release notes as I already stated above. There's an entire section dedicated to minimum compatible versions when upgrading to a new major release. HERE is the direct link to the list for PAN-OS 10.0, which again as I already stated requires your Application and Threats content version to be at least 8332 or greater.