Method Upgrade PanOS and impact upgrade

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Method Upgrade PanOS and impact upgrade

L1 Bithead

Dear All

 

 

I want to know, method upgrade and impact if we are wrong away.

 

In guide PA :

 

Determine the upgrade path.

You cannot skip installation of any major releases in the path to your target PAN-OS version. Therefore, if you intend to upgrade to a version that is more than one major release away, you must still download, install, and reboot the firewall for each intermediate major release along the upgrade path.

For example, if you want to upgrade from 6.1.13 to PAN-OS 8.0.0, you must:

Download and install PAN-OS 7.0.1 and reboot (7.0.1 is the base image for the 7.0 release; not 7.0.0).

Download and install PAN-OS 7.1.0 and reboot.

Download and install PAN-OS 8.0.0 and reboot.

 

If we would upgrade from diffrent major version we must download major version then install and reboot.

 

In my case, I want to upgrade from 7.1.9 to 8.0.2, step by step, the following :

1. what must do that? download 7.1.10, install, reboot then download 8.0.0 install, reboot then download 8.0.2 install, reboot.

2. Or we could direct download image 8.0.2 from 7.1.9, install and reboot.

 

Many Thanks

Best Regards

Wajatmaka

3 accepted solutions

Accepted Solutions

L4 Transporter

Hi Wajatmaka,

 

You need to download the next base image without installing it (if your particular release was on the same series) then install and download your version then reboot.

 

For your case, install 8.0.0 without downloading it (cause the base image of 7.1.9 is already downloaded which is 7.1.0). Then download and install 8.0.2 and reboot.

 

Regards,

Sharief

Regards,
Sharief

View solution in original post

Cyber Elite
Cyber Elite

you are only required to install intermediate major versions, so 6.1.x, 7.0.x, 7.1.x, 8.0.x and so on

 

if you're already on a preceding major release, you only need to download the next version's base image (usually x.x.0)

then download+install maintenance version you want to go to, then reboot

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

View solution in original post

other than following the best practices there are no provisions for a PA-500 : Best Practices for PAN-OS Upgrade

 

other devices may have some, for example the latest platforms (PA-220, PA-800 and PA-5200) all require a minimum of PAN-OS 8.0

 

 

 

 

base image:

each major release has a base image, which is the very first version available to download. this installer package includes the whole operating system with everything on it, and is quite large compared to maintenance release packages

the maintenance releases only contain updated software, bugfixes etc so they are easier to download

 

but since the maintenance release packages do not contain the entire operating system, it's always required to download the base image in addition to the maintenance release you want to go to, before being able to install the maintenance version

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

View solution in original post

5 REPLIES 5

L4 Transporter

Hi Wajatmaka,

 

You need to download the next base image without installing it (if your particular release was on the same series) then install and download your version then reboot.

 

For your case, install 8.0.0 without downloading it (cause the base image of 7.1.9 is already downloaded which is 7.1.0). Then download and install 8.0.2 and reboot.

 

Regards,

Sharief

Regards,
Sharief

Cyber Elite
Cyber Elite

you are only required to install intermediate major versions, so 6.1.x, 7.0.x, 7.1.x, 8.0.x and so on

 

if you're already on a preceding major release, you only need to download the next version's base image (usually x.x.0)

then download+install maintenance version you want to go to, then reboot

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Hi MohamedSharief

 

Many thanks about your feedback. But any question in my head. How to know the version image is image base, Sharief...please?

 

Many Thanks

Best Regards

 

Hai

 

Oh I am understand, base image is major version. what are there any provisions regarding upgrading panOS for any devices? My device is using PA-500.

 

 

 

Best Regards

 

other than following the best practices there are no provisions for a PA-500 : Best Practices for PAN-OS Upgrade

 

other devices may have some, for example the latest platforms (PA-220, PA-800 and PA-5200) all require a minimum of PAN-OS 8.0

 

 

 

 

base image:

each major release has a base image, which is the very first version available to download. this installer package includes the whole operating system with everything on it, and is quite large compared to maintenance release packages

the maintenance releases only contain updated software, bugfixes etc so they are easier to download

 

but since the maintenance release packages do not contain the entire operating system, it's always required to download the base image in addition to the maintenance release you want to go to, before being able to install the maintenance version

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization
  • 3 accepted solutions
  • 4788 Views
  • 5 replies
  • 1 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!