topic PANOS 9.1.11 able to support PANOS 9.0.13 (PA-5220), 8.1.19 (PA-5020) and 8.1.16? in General Topics

PANOS 9.1.11 able to support PANOS 9.0.13 (PA-5220), 8.1.19 (PA-5020) and 8.1.16?

isentric89 — Wed, 29 Sep 2021 05:20:21 GMT

Would like to know whether Panorama software PANOS 9.1.11 will be able to support the PANOS 9.0.13 (PA-5220), 8.1.19 (PA-5020) and 8.1.16? Is it PANOS 9.1.11 is the stable version?

Re: PANOS 9.1.11 able to support PANOS 9.0.13 (PA-5220), 8.1.19 (PA-5020) and 8.1.16?

PavelK — Wed, 29 Sep 2021 05:33:24 GMT

Thank you for posting question @isentric89

I can only speak for my own experience. I have the same scenario running Panorama on 9.1.11 and firewalls running on different versions including a few Firewalls on 9.0.X and 8.1.X. Within the scope of pushing configuration and log collection, I did not come across any issue.

Regarding version 9.1.11 on Panorama, I would say it is stable, however after you upgrade to this version you will likely experience an error discussed here: https://live.paloaltonetworks.com/t5/general-topics/error-on-generating-system-logs/m-p/433643#M95902

Kind Regards

Pavel

Re: PANOS 9.1.11 able to support PANOS 9.0.13 (PA-5220), 8.1.19 (PA-5020) and 8.1.16?

isentric89 — Wed, 29 Sep 2021 22:43:00 GMT

Hi PavelK,

Thanks for the sharing. Appreciated it !!

Re: PANOS 9.1.11 able to support PANOS 9.0.13 (PA-5220), 8.1.19 (PA-5020) and 8.1.16?

BPry — Thu, 30 Sep 2021 02:27:33 GMT

@isentric89,

Just to expand on what @PavelK already mentioned, Panorama can manage any firewall running a major release at or below it's current level. So if you are running PAN-OS 9.1.11 on your Panorama instance you can manage all supported major versions below that release (and really any release prior, although unsupported releases aren't actively validated) but you can't run anything above your current major version. So your 9.1.11 Panorama instance can't manage a firewall running PAN-OS 10 or 10.1.