9.0.0 or 9.0.6 from 8.1.8

[abdulhakam]

Current running version 8.1.8, so can upgrade version 9.0.6 or need to upgrade version 9.0.0 first.?
Model PA-220.

Pls advise

[BPry · Accepted solution]

@abdulhakam,

Your upgrade path would look like the following:

1) Download and install 8.1.13

- Restart

2) Download and install 9.0.0

- Do NOT restart.

3) Download and install 9.0.6

- Restart

It's always best to be on the latest maintenance release of your current code branch before doing a major upgrade, so in this case for you that would be 8.1.13. The base image should be installed so the system doesn't have to explode two images onto disk to build a working installer, but you don't need to restart and switch the active partition until you install 9.0.6 which is the target release in your upgrade path. 

[SutareMayur]

Hi @abdulhakam,

No need to upgrade to 9.0.0, you can directly jump to 9.0.6. Only thing is, keep base version 9.0.0 downloaded on the gateway. Then you are good to go to 9.0.6.

Hope it helps!

Mayur

[BPry]

@abdulhakam,

I would follow this model.

1. Download and install the latest maintenance release.
   1. Restart
2. Download and install 9.0.0
   1. Do NOT restart.
3. Download and install 9.0.6
   1. Restart

This prevents the PA-220 from having to explode both 9.0.0 and 9.0.6 to disk and build a working install image for 9.0.6 from the bits and pieces included in the base image and the target maintenance release. 

[abdulhakam]

Hi,

@BPry 

U mention:

1. Download and install the latest maintenance release.
   1. Restart

It meant, if latest version is 9.0.6 download and install and also restart.

But u mention too:

           2. Download and install 9.0.0

               Do NOT restart.

         3. Download and install 9.0.6

              Restart.

If I download,install and restart for step number 1. so i can skip step number 2 and 3 right.?

Or any details step do doing upgrade from  8.1.X to 9.0.6.?

Thanks?

[abdulhakam]

Hi @SutareMayur ,

What yr meant keep base version 9.0.0 downloaded on the gateway. ?

It meant just download and install 9.0.0 but not restart and download version 9.0.6 and install also restart right.?

Thanks

[SutareMayur]

@abdulhakam  No need to install 9.0.0, just keep it downloaded on the firewall. Then download target version and install it.

It is recommended path when moving from one feature release to the next is to download the base image for the next feature release version and then download and install your target maintenance release version. You must have both the base image and the maintenance release image on the firewall for installation to be successful.

Hope it clarifies your queries.

Mayur

[BPry · Accepted solution]

@abdulhakam,

Your upgrade path would look like the following:

1) Download and install 8.1.13

- Restart

2) Download and install 9.0.0

- Do NOT restart.

3) Download and install 9.0.6

- Restart

It's always best to be on the latest maintenance release of your current code branch before doing a major upgrade, so in this case for you that would be 8.1.13. The base image should be installed so the system doesn't have to explode two images onto disk to build a working installer, but you don't need to restart and switch the active partition until you install 9.0.6 which is the target release in your upgrade path. 

[Vikashh]

@BPry Is it really required to install 9.0.0 base version in this upgrade path ? I think it is enough to keep base version downloaded on the gateway.

I did several upgrades in this way only.

I am not opposing you but just quite curious about it.

[BPry]

@Vikashh,

It's not required, it simply prevents the firewall from having to explode both the 9.0.0 and 9.0.6 images onto disk and building the actual install image from both images. Some older models have issues with building a proper install image due to disk limitations, and this upgrade procedure prevents that from being as big of an issue as the firewall can properly calculate disk requirements individually ensuring at the onset that it'll have enough disk space. 

If you know that you have enough available disk space so the firewall can build a proper install image without space constraints, then you don't need to install the base image at all. However, since we have no idea what the OPs equipment actually looks like I'm always going to provide the upgrade procedure that poses the least amount of risk regardless of environment.