VM snapshot is required just to be on safer side before upgrading the firewall firmware ?

[shashanktripathi]

we were upgrading the firmware in the past and due to VM kernel got crashed we have to rebuild a new VM for Paloalto.

then in this case just want to know if the VM snapshot will help
or
VM snapshot is required just to be on safer side before upgrading the firewall.

[TomYoung]

Hi @shashanktripathi ,

Do you use VMware?  Unless something has changed, snapshots are not supported ->. https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-a-vm-series-firewall-on-....  You could give it a try.  Obviously, export the config 1st.

Thanks,

Tom

[OtakarKlier]

Hello,

I agree with @TomYoung , just export the config prior to upgrade. It has data bases running and could really mess thing sup if you try a roll back, etc.

Regards,

[Raido_Rattameister]

If config is pushed from Panorama then it is good to export also "Device state" as running config export includes only local config.