If downgrade PA820 OS from 9.04 to 8.1.16, configuration still valid?

Announcements

Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.

Reply
herman2018
L2 Linker

If downgrade PA820 OS from 9.04 to 8.1.16, configuration still valid?

Hi, If downgrade PA820 OS from 9.04 to 8.1.16, will the configuration be still valid? any impact to the configuration? 

we just use normal security firewall rules, not enable Sd-WAN. Anyone can please advise, thanks in advance!


Accepted Solutions
SutareMayur
L6 Presenter

@herman2018,

 

This shouldn't caused any issues with the configuration. But as a precautionary action, you should take running configuration backup of gateways and/or Panorama on your local system.

 

Please refer below article -https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/upgrade-to-pan-os-90/downgrade-from... for getting more clarity.

 

Also you can refer below article to know best practices for downgrading PANOS.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRrCAK#anchor7 Refer Point - 7. Downgrade Procedure.

 

Hope it helps!

Mayur S.

View solution in original post


All Replies
SutareMayur
L6 Presenter

@herman2018,

 

This shouldn't caused any issues with the configuration. But as a precautionary action, you should take running configuration backup of gateways and/or Panorama on your local system.

 

Please refer below article -https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/upgrade-to-pan-os-90/downgrade-from... for getting more clarity.

 

Also you can refer below article to know best practices for downgrading PANOS.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRrCAK#anchor7 Refer Point - 7. Downgrade Procedure.

 

Hope it helps!

Mayur S.

View solution in original post

herman2018
L2 Linker

Thanks @SutareMayur , sorry, ask you one more question, what is downgrade path? can downgrade from 9.04 to 8.16 directly? or 9.04 --> 9.0 --> 8.16 ? or 9.04 -> 9.0 -> 8.1.0 -> 8.1.16? Please advise, thanks a lot!

SutareMayur
L6 Presenter

@herman2018,

 

As you are going to downgrade from 9.0.4 to 8.1.16,

 

1. Make sure that base image 8.1.0 is still downloaded on the firewall. If not, first download base image on the firewall. If firewalls are in HA, keep base image downloaded on both firewalls.

2. Now download and install preferred image i.e. 8.1.16 and then reboot system to complete the installation.

 

For this also, you can refer best practices given in article shared in my last response. Sharing same here also. Refer Point 7. Downgrade Procedure.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRrCAK#anchor7

 

Hope it helps!

Mayur Sutare

Mayur S.
herman2018
L2 Linker

Thanks a lot @SutareMayur !

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!