PANOS Upgrade from 6.1 to 9.1

[SeanDeHarris]

Got an old firewall, 

How much is the risk to upgrade from PANOS 6.1 to 9.1 now???

Any concern?

[aleksandar.astardzhiev]

Hi @SeanDeHarris,

The recommended way for upgrade is to:

- Go to the latest maintenance release for the current version

- Go to next feature/major version by downloading base image and latest maintenance and installing the latest maintenance.

Another problem you will probably face is that with so many images that you need to download you your device will probably not have enough space for all, so you will not be able to download them at once, instead download, upgrade, download, upgrade.

The only reason to follow this approach is to assure proper config "auto-migration" to the new version.

If the firewall is not in production and you can afford to wipe the config and start from scratch I believe you can jump straight to the latest 9.1.x maintenance (downloading 9.1.0 base as well of course)

I would say the only concern is as always with any other upgrade - the config auto-converter to fail and not properly convert part of the config.

[BPry]

@SeanDeHarris,

You may need to contact TAC (and of course have valid support) to get some of the images you require since you require versions that are no longer supported. They'll be provided without issue, they just aren't readily available on the support page to prevent people from staying on outdated software.