If downgrade PA820 OS from 9.04 to 8.1.16, configuration still valid?

[herman2018]

Hi, If downgrade PA820 OS from 9.04 to 8.1.16, will the configuration be still valid? any impact to the configuration? 

we just use normal security firewall rules, not enable Sd-WAN. Anyone can please advise, thanks in advance!

[SutareMayur · Accepted solution]

@herman2018,

This shouldn't caused any issues with the configuration. But as a precautionary action, you should take running configuration backup of gateways and/or Panorama on your local system.

Please refer below article -https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/upgrade-to-pan-os-90/downgrade-from... for getting more clarity.

Also you can refer below article to know best practices for downgrading PANOS.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRrCAK#anchor7 Refer Point - 7. Downgrade Procedure.

Hope it helps!

[herman2018]

Thanks @SutareMayur , sorry, ask you one more question, what is downgrade path? can downgrade from 9.04 to 8.16 directly? or 9.04 --> 9.0 --> 8.16 ? or 9.04 -> 9.0 -> 8.1.0 -> 8.1.16? Please advise, thanks a lot!

[SutareMayur]

@herman2018,

As you are going to downgrade from 9.0.4 to 8.1.16,

1. Make sure that base image 8.1.0 is still downloaded on the firewall. If not, first download base image on the firewall. If firewalls are in HA, keep base image downloaded on both firewalls.

2. Now download and install preferred image i.e. 8.1.16 and then reboot system to complete the installation.

For this also, you can refer best practices given in article shared in my last response. Sharing same here also. Refer Point 7. Downgrade Procedure.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRrCAK#anchor7

Hope it helps!

Mayur Sutare

[herman2018]

Thanks a lot @SutareMayur !