jumping from 8.0.17 to 8.1.7 directly?

[chuckles]

can i upgrade from 8.0.17 to 8.1.7 directly? also would going to 8.1.7 change any of my current config? 

[BPry]

@khsieh,

You don't run with 8.1 installed and actually running your firewall for any length of time, you immediately perform the upgrade to your target maintenance release. 

I'll state it again, but you can follow the old upgrade model where you only needed to download the base image if you want IT IS NOT BEST PRACTICE to do so. If the upgrade breaks your device because your disk ran out of space building a complete install image, tough nuggets.

The recommended upgrade path for migrating to 8.1 is the following:

1) Download and install 8.0.19 (as it's the latest maintenance relase). 

2) Reload

3) Download 8.1.0 and 8.1.7 (remove any other image you may have installed except for 8.0.19)

4) Install 8.1.0 (you do not need to reload)

5) Install 8.1.7

6) Reload

7) Verify the device is functioning as intended.

[MP18]

I will follow your path.

As i am upgrading all PA to 8.1.9 from 8.0.15.

Is it recommended to install 8.1.9?

[BPry]

@MP18,

Technically at this point in time 8.1.9 is not a recommended release. That being said, I haven't run into any new issues with 8.1.9 that weren't present in 8.1.8. I'm in the process of upgrading all of my managed firewalls to 8.1.9 and haven't run into any issues effecting production traffic. 

[jeremy.larsen]

Current TAC recommended is 8.1.8 - https://live.paloaltonetworks.com/t5/Customer-Resources/Support-PAN-OS-Software-Release-Guidance/ta-...

[Pzilla]

If you have a 5200 series HA pair and are thinking of running 8.1.7 or 8.1.8, be aware of the bugs discussed in this thread:

https://live.paloaltonetworks.com/t5/General-Topics/Bug-8-1-7-8-1-8-PA-5200-AUX-Ports/td-p/262440