Panorama Software Upgrade

[IanBroadway]

Hi All,

Just wanted to confirm I have the process right.

We're running Panorama, M-100 appliance (32GB RAM), managing 3 pairs (6 no) of PA-3220 firewalls.

All currently running PAN-OS 8.1.5. Looking to upgrade to the next major stable release, currently listed as 9.0.6.

From what I have read, upgrade path is, Panorama first, 8.1.5 > 9.0.0 > 9.0.6, is this correct?

Once this is complete, same upgrade path for the physical firewalls, albeit the process relevant to your physical deployment i.e. ha active/standby process.

Ian

[kiwi]

Hi @IanBroadway ,

Yup that's pretty much it.

Cheers !

-Kiwi.

[IanBroadway]

Great thanks for confirming.

[IanBroadway]

Sorry, I have been having a read of this article

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRrCAK

It would appear based on this I should be able to go from 8.1.5 > 9.0.6 direct?

[SutareMayur · Accepted solution]

@IanBroadwayYes you can go to directly 9.0.6 from 8.1.5 but only thing you need to keep base version 9.0 downloaded. Once Base version is downloaded, then download target version and install it.

It is recommended path when moving from one feature release to the next is to download the base image for the next feature release version and then download and install your target maintenance release version. You must have both the base image and the maintenance release image on the firewall for installation to be successful.

Hope it helps!

Mayur

[robertocol]

@SutareMayur Hi, i'm trying to figure how to do the same with Panorama software deployment as panorama Use to push the firmware downloaded to panorama repository to the device and install it.
Pheraps have to push the base version checking "upload only without install" and then push and install the target maintenance ? Or there's a better feature to do this at once?