PANOS 9.1.11 able to support PANOS 9.0.13 (PA-5220), 8.1.19 (PA-5020) and 8.1.16?

[isentric89]

Would like to know whether Panorama software PANOS 9.1.11 will be able to support the PANOS 9.0.13 (PA-5220), 8.1.19 (PA-5020) and 8.1.16? Is it PANOS 9.1.11 is the stable version?

[PavelK · Accepted solution]

Thank you for posting question @isentric89

I can only speak for my own experience. I have the same scenario running Panorama on 9.1.11 and firewalls running on different versions including a few Firewalls on 9.0.X and 8.1.X. Within the scope of pushing configuration and log collection, I did not come across any issue.

Regarding version 9.1.11 on Panorama, I would say it is stable, however after you upgrade to this version you will likely experience an error discussed here: https://live.paloaltonetworks.com/t5/general-topics/error-on-generating-system-logs/m-p/433643#M9590...

Kind Regards

Pavel

[isentric89]

Hi PavelK,

Thanks for the sharing. Appreciated it !!

[BPry]

@isentric89,

Just to expand on what @PavelK already mentioned, Panorama can manage any firewall running a major release at or below it's current level. So if you are running PAN-OS 9.1.11 on your Panorama instance you can manage all supported major versions below that release (and really any release prior, although unsupported releases aren't actively validated) but you can't run anything above your current major version. So your 9.1.11 Panorama instance can't manage a firewall running PAN-OS 10 or 10.1.