PanOS upgrade strategy

cancel
Showing results for 
Search instead for 
Did you mean: 

PanOS upgrade strategy

L1 Bithead

Hi All,

We are running PA firewalls + Panorama + Prisma Access in our environment. Our aim is to upgrade our cloud prisma plugin to 3.0 for additional features, however we are not getting the best approach to do this. 

Our existing environment is : 

DeviceCurrent versionExpected Version
   
Bunch of firewalls in HA pairs9.1.810.1.4-h4
Panorama9.1.1310.1.4-h4
Cloud Services Plugin2.1.0-h12.preferred3.0 preferred
Dataplane version10.0.3-
VM-series Plugin 2.0.4-

 

How should one approach this ?

(1) Upgrade the Panorama + Plugins gradually ( 9 ---> 10.0 --->10.1 etc ) keeping the firewalls as is and then once Panorama + Plugins are upgraded we target the firewalls. 

(2) Upgrade the Panorama + Plugins + Firewalls all at once 

(3) Any other options ( we can have 0 downtime )

1 ACCEPTED SOLUTION

Accepted Solutions

L3 Networker

Hi Kandarp,

 

I recommend going with the first option instead of all at once.

 

Important notes before upgrading:

•If using Panorama management in an HA configuration, HA must be set up before setting up Prisma Access management.

•Every Prisma Access cloud services plugin has a specific range of supported Panorama versions it is rated to work with.  Ensure that Panorama and the cloud services plugin are at compatible versions each time the plugin is installed or updated.

 

Best Regards,
Suresh

View solution in original post

1 REPLY 1

L3 Networker

Hi Kandarp,

 

I recommend going with the first option instead of all at once.

 

Important notes before upgrading:

•If using Panorama management in an HA configuration, HA must be set up before setting up Prisma Access management.

•Every Prisma Access cloud services plugin has a specific range of supported Panorama versions it is rated to work with.  Ensure that Panorama and the cloud services plugin are at compatible versions each time the plugin is installed or updated.

 

Best Regards,
Suresh
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!