OS upgrade rollback from 7

[jdprovine]

I am currently on version 6.1.10 and when I upgraded to it in March I was told by TAC that is was currently the most stable version. I am looking at what it would take to move up to the most stable version of 7 but first I want to figure out the best way to roll back the upgrade should it not go well, I am assuming its not as easy as re-installing 6.1.10 because there are now major feature changes. Has anyone had to roll back, how did you do it and how hard was it?

[AlexZu]

It should be that easy.  We move between version on our dev firewalls when testing new versions before deploying without issues.

Here is a link from PA regarding downgrading:

https://www.paloaltonetworks.com/documentation/70/pan-os/newfeaturesguide/upgrade-to-pan-os-7-0/down...

[jdprovine]

That is awesome thanks and remember bumbles bounce

[reaper]

To roll back to the previously installed software version, you can use the below command to activate the currently inactive system volume

> debug swm revert

the hardware has 2 partitions reserved for the operating system of which there is only 1 active at a time, the swm command allows you to manipulate the bootlader so it loads the previosuly installed operating system upon reboot by simply opening up the other partition

you can check your current status with this command:

> debug swm status

Partition         State             Version
--------------------------------------------------------------------------------
sysroot0          REVERTABLE        7.0.5
sysroot1          RUNNING-ACTIVE    7.1.0
maint             READY             7.1.0

[jdprovine]

Awesome reaper now I have three methods, my SE said I could take a back up of the config prior to the upgrade  and load it back on the PA. Another engineer said that I could take a snapshot of the config prior to the ugrade and rollback to it

[jdprovine]

@reaper

Apparently we have discussed this before, too bad my little and old pea brain doesn't retain everything like it used too LOL