Method Upgrade PanOS and impact upgrade

[wajatmaka]

Dear All

I want to know, method upgrade and impact if we are wrong away.

In guide PA :

Determine the upgrade path.

You cannot skip installation of any major releases in the path to your target PAN-OS version. Therefore, if you intend to upgrade to a version that is more than one major release away, you must still download, install, and reboot the firewall for each intermediate major release along the upgrade path.

For example, if you want to upgrade from 6.1.13 to PAN-OS 8.0.0, you must:

Download and install PAN-OS 7.0.1 and reboot (7.0.1 is the base image for the 7.0 release; not 7.0.0).

Download and install PAN-OS 7.1.0 and reboot.

Download and install PAN-OS 8.0.0 and reboot.

If we would upgrade from diffrent major version we must download major version then install and reboot.

In my case, I want to upgrade from 7.1.9 to 8.0.2, step by step, the following :

1. what must do that? download 7.1.10, install, reboot then download 8.0.0 install, reboot then download 8.0.2 install, reboot.

2. Or we could direct download image 8.0.2 from 7.1.9, install and reboot.

Many Thanks

Best Regards

Wajatmaka

[MohamedSharief · Accepted solution]

Hi Wajatmaka,

You need to download the next base image without installing it (if your particular release was on the same series) then install and download your version then reboot.

For your case, install 8.0.0 without downloading it (cause the base image of 7.1.9 is already downloaded which is 7.1.0). Then download and install 8.0.2 and reboot.

Regards,

Sharief

[reaper · Accepted solution]

you are only required to install intermediate major versions, so 6.1.x, 7.0.x, 7.1.x, 8.0.x and so on

if you're already on a preceding major release, you only need to download the next version's base image (usually x.x.0)

then download+install maintenance version you want to go to, then reboot

[wajatmaka]

Hi MohamedSharief

Many thanks about your feedback. But any question in my head. How to know the version image is image base, Sharief...please?

Many Thanks

Best Regards

[wajatmaka]

Hai reaper

Oh I am understand, base image is major version. what are there any provisions regarding upgrading panOS for any devices? My device is using PA-500.

Best Regards

[reaper · Accepted solution]

other than following the best practices there are no provisions for a PA-500 : Best Practices for PAN-OS Upgrade

other devices may have some, for example the latest platforms (PA-220, PA-800 and PA-5200) all require a minimum of PAN-OS 8.0

base image:

each major release has a base image, which is the very first version available to download. this installer package includes the whole operating system with everything on it, and is quite large compared to maintenance release packages

the maintenance releases only contain updated software, bugfixes etc so they are easier to download

but since the maintenance release packages do not contain the entire operating system, it's always required to download the base image in addition to the maintenance release you want to go to, before being able to install the maintenance version