Downgrade Firewall from 10.0.0 to 9.1.1

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Downgrade Firewall from 10.0.0 to 9.1.1

L2 Linker

Greeting Team!

I noticed some problems with a downgrade in my internal lab. So, some information: I want to downgrade from 10.1.7 to 9.1.1 (i need it for the experiment).

1st step i downgrade from 10.1.7 to 10.0.0, everything fine. But, when I want to downgrade from 10.0.0 to 9.1.1 I faced an error with: Upstream NAT not supported on 9.1.1, please delete it. (i can show it if needed).

I check the information about that, I find some. Like workaround advice to 1st have 10.0.3 or 10.0.4 PAN-OS, then delete upstream NAT from each interface. I try it, but, nothing, cli logs I can show too if needed.

 

Does somebody face that problem?

 

Thank you and have a good day!

 

#downgrade #wm #10.0.0 #9.1.1 #Up-StreamNAT NGFW 

9 REPLIES 9

Cyber Elite
Cyber Elite

if you're doing this for an experiment on 9.1, you could factory reset your device so you don't have to battle artefacts

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Dear Reaper, thank you for your response.

I need that experiment, cause soon I will do a downgrade on my working firewall. I can`t factory reset my firewall.

 

Best Regards.

Cyber Elite
Cyber Elite

Hello,

Is there a reason you need to downgrade? Is there a bug you are facing? Also which model of Palo Alto are you attempting this on?

Regards,

Hi Dear Otakar,

 

Is there a reason you need to downgrade? - I need to be sure, that workaround works, and then apply it on the working firewall

Is there a bug you are facing? - I don't know actually, maybe its a bug, but I can't find information about it.

Also which model of Palo Alto are you attempting this on? - I go WM-50

 

 

 

 

Cyber Elite
Cyber Elite

Hello,

So if the VM is currently running 9.1.x and then you upgrade to 10.1.7, you should be able to downgrade back.

 

Regards,

Dear OtakarKlier,

 

CM currectly running 10.1.x, as i write, i got no trouble with downgrade from 10.1.x to 10.0.x, but from 10.0.x to 9.1.x i faced problem.

 

Best Regards.

Cyber Elite
Cyber Elite

What was the code version the VM was initially deployed on?

The Code version was 10.1.7 on my VM

Cyber Elite
Cyber Elite

If it was deployed at 10.1.7, why downgrade to 9.x.x? I would not recommend downgrading a device, physical or virtual to below what it was initially deployed on, so the lowest in this case would be 10.1.0.

 

  • 3495 Views
  • 9 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!