PANORAMA UPGRADE from 8.0.19 to 8.1.X template Query

Reply
L1 Bithead

PANORAMA UPGRADE from 8.0.19 to 8.1.X template Query

I am in process of upgarding our Panorama (M-100) from 8.0.19 to 8.1.X code.

I have gone through below URL for upgrade consideration and procedure to upgrade PAN.

One thing i feel is critical to my enviroment is Template. We use regular template however 8.1.x code support template stack.

As per online documention , conversion from template to template stack will be automatic.

As its our production environment (90+ firewalls) and we cannot test (Azure PAN support 8.1.X only) i am bit skeptical how things will behave at time of migration.

 

Has anyone upgarded PAN from 8.0.X to 8.1.X ? If yes, did they face any issue? Please share your real time experience.

 

Here are the upgrade considerations:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-new-features/upgrade-to-pan-os-81/upgradedowngra...


HOW TO UPGRADE PAN-OS AND PANORAMA
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRrCAK

Tags (2)
L5 Sessionator

Re: PANORAMA UPGRADE from 8.0.19 to 8.1.X template Query

Hello there.

 

when we upgraded from 8.0 to 8.1, our templates were put together into a single stack.

 

Considerations to ensure you are aware of

 

8 templates in a stack.

template in highest position will override any duplicate template info in a lower template.

So, ensure your most specific information/tempate, is at the highest position.

 

example

template-for-US-West   DNS server (192.168.1.20)

template-for-US-general DNS server 10.10.1.100)

template-for-DNS-world  DNS server 172.16.1.55

 

because template-for-US-West is in top postion of stack, the xml config that any US-West FWs would get would be 192.168.1.20.

Make sense?

 

When you upgrade from 8.0 to 8.1, the Panorama will automatically create a auto-restore-8x configuration snapshot file for you.

So, worst case, you can downgrade from 8.1 to 8.0, and have your original configuration back.

 

Let me know what other questions you have.

Help the community: Like helpful comments and mark solutions
Tags (2)
Highlighted
L1 Bithead

Re: PANORAMA UPGRADE from 8.0.19 to 8.1.X template Query

Thanks Steve, that was helpful . However , you mentioned you put template in single template stack manually, did you anticipated issues how auto coversion feature will handle conversion of template to template stack when doing an upgrade and hence you choose to do it manually prior upgrade?

Tags (2)
L1 Bithead

Re: PANORAMA UPGRADE from 8.0.19 to 8.1.X template Query

I left template as it is and upgraded PAN to 8.1.9-h4 from 8.0.19 and template stack got automatically created with correct device mapping as expected. The Upgrade went smooth with no issues so far.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!