PAN-OS 7.1 Resource List

[craig.pearson]

Hi,

I am looking to upgrade Panorama and firewalls from version 7.0.8 to version 8.0.2. Is there a requirement to upgrade PA and all firewalls to 7.1.0 prior to moving to 8?

My main concern is if i am able to manage firewalls with 7.0.8 from Panorama running 8.0.2

Many thanks

Craig

[TranceforLife]

Hi,

https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os-release-notes/pan-os-7-0-release-inf...

[craig.pearson]

Thank you.  So managing firewalls will work correctly if they are 7.0.8 and Panorama 8.0.2?

Also, when updating clustered (HA) firewalls, is it recommended to update both to 7.1.0 before moving to 8.0.2, or am I safe to move them to 8.0.2 one at a time?

Many thanks

[reaper]

Hi @craig.pearson

Here's the best practices guide 🙂 Best Practices for PAN-OS Upgrade

If you have downtime scheduled and intend to 'end up' with both the firewalls on the same version at the end of your maintenance window, you can do one at a time. If your question was to let one member be on 7.0 for a longer period of time, I'd recommend upgrading both peers so you will still have a functional cluster versus having one firewall be non-functional and the other (7.0) needing to be suspended for you to be able to test the 8.0 peer (by default a cluster elects the peer with the lowest PAN-OS as the active member)