Error updating Panorama to 5.1.0

[soporteseguridad]

Hi, we have installed the version 5.1.0 in Panorama and changed the values (LSI,RAM,SO) in VM, but when we restart the VM the panorama is not going up. 

CMS withouth credentials is not working. 

Maintenance mode shows this:

What could we do???

[reaper]

Hi

To be able to change the hardware parameters of a VM host, you need to do a clean install

if you want to upgrade your panorama AND upgrade it's hardware profile, it's better to install a fresh image on 5.1.11 and migrate your configuration, then shut down the new host, attach the log partition and boot up again (of if  you have a single drive for panorama, export and import the log database)

[soporteseguridad]

Hi reaper, but i followed the relese anotes 5.1.0 it should be works....It didnt say anything about clean installation :S

Could we install this version in VMWARE nd import the config?????

5.1.0-ESX

05/09/2013

Panorama-5.1.0-RN-revA.pdf

Panorama-ESX-5.1.0.zip

1.0 GB

MD5

or install the 7.0.1 directly and import config, or this version didnt handle the old config (5.0.5)??

7.1.0

03/30/2016

PAN-OS-7.1.0.pdf

Panorama-ESX-7.1.0.ova

[reaper]

Hi @soporteseguridad

As long as you're only upgrading the software there will not be a problem, this is what is covered in the release notes

However it is not recommended to change the hardware parameters (cpu, ram, ...) of an already installed system as it could cause issues

i'm not sure if you can immediately import a 5.0 config file into a 7.0 or 7.1 system, i have not tried that

[soporteseguridad]

Thanks reaper.

There is another change in VMware doing an upgrade in Panoramas version or just going to 5.1.0??

How Panorama licenses work??? if i instal the ovf 5.1.0, the VM would have another serial number right for the licenses?? how licenses work in VM??

[reaper]

Hi

I'm not sure what you mean. When performing a normal upgrade, there will never be a problem. all upgrades from and to all versions will work as expected and there should not be any issues while booting up.

unless:  if the hardware is changed (cpu/ram/.. added or removed from the vm host) you will need to install a fresh image

the licences are attached to the serial number. if you install a fresh image of PAN-OS 5.1 you will need to put the serial number on the new host (configurable), import the licences and configuration, decomission the old host

[soporteseguridad]

Upgrading to Panorama 5.1.0 (base image), when the new software is intalled and the panorama is restarted after. You need to stop the VM change several VM paramethers and power on the VM. The problem is that the machine stucks in CMS and not restarting fine....

[reaper]

ok, so it appears 5.1 is special as this changes from 32bit to 64bit, apologies!

did you follow these steps exactly ?

5. (Required only on the Panorama virtual appliance) Modify the settings on the virtual appliance.

   a. Power off the Panorama virtual appliance on the ESX(i) server.

   b. Select the Panorama virtual machine, and right-click. Select Edit    

       Settings... and make the following changes:

        i. On the Hardware tab, change the SCSI Controller Type from BusLogic Parallel to LSI Logic Parallel.

        ii. (Optimal performance recommendation) Increase resource allocation for RAM and CPU based on the following minimum system    

            requirements for Panorama 5.1:  Quad Core CPU (2 GHz); use 3GHz if you have 10 or more firewalls  4GB RAM; use 16GB if  

            have 10 or more firewalls  40GB disk space

        iii. On the Options tab, change the Guest Operating System for the virtual appliance from Other Linux (32-bit) to Other Linux (64-bit).

  c. Power on the Panorama virtual appliance.

If you did, and the system froze up you may want to reach out to support to see what could have happened. under most other circumstances it would not be recommended to do so but in this case it appears it is recommended, sorry for the confusion

[soporteseguridad]

Yes, i did twice and the result was bad. I opened a case but waiting for response.....

thanks reaper...