Panorama 3.1 to 4.0 migration

[bdaussin]

Hi,

I would like to know if Panorama 4.0 is able to manage PanOS 3.1.x firewall. If yes is there any restrictions or known caveats ?

In fact, we are planning to purchase Firewall 5050 which support only PANOS 4.0, and beside this we have some others 40xx series,

that we can't migrate to 4.0 fast enough. So if panorama is able to manage 3.1 and 4.0 firewall it would be great.

Thanks for your help

[bpappas]

Yes, Panorama 4.0.1 can manage firewalls running 3.1 code.

These aren't exactly caveats, and there may be more 4.0/3.1 differences that I am not thinking of at the moment:

1. Extended Object Sharing will not work between a 4.0 Panorama and a 3.1 firewall.

2. Log buffering is only supported for 4.0 firewalls.

-Benjamin

[bdaussin]

Hi Benjamin,

thanks for your reply.

Just to be sure to anderstand, Log buffering and Extended object Sharing are new features ?

Thanks

Benjamin :smileylaugh:

[bpappas · Accepted solution]

Benjamin

Yes. Those are some of the new features in PAN OS 4.0. For a complete list you can read this:

http://www.paloaltonetworks.com/literature/datasheets/PAN-OS4.0.pdf

-Benjamin

[bdaussin]

Thanks a lot,