Problem downgrade PAN-500

[DKanta]

Hi all!

i am trying to downgrade a PA-500 from 7.1.7 to 5.0.X.

I have downgraded to 7.0.1, but i am nor allowed to downgrade to 6.1.0, when i upload the image file it says 'PanOS_500-6.1.0 already exists', but the only images present are 7.0.1 and 4.1.4 (or something similar).

Do you have some hints?

Regards,

Daniele

[Remo]

Hi @DKanta

May I first ask you why you want to downgrade to 5.0.x?

5.0.x has reached it's end-of-life date on november 13, 2016.

https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary

Regards,

Remo

[DKanta]

Hi @Remo

i have to downgrade it due to an activity for a customer having that version, later i will upgrade to 7.1.X

Regards,

Daniele

[Remo]

this could be difficult. Right now you already downgraded once, so the firewall changed to your backup partition where 7.0.x was installed. Now the backup partition still contains 7.1.x. Probably not the best idea (in your very special situation) was downgrading to 7.0.1. It may be is a bug in 7.0.1.

what you could try next:

1. reboot and try to download/upload 6.1.0 again
2. install 7.0.16 and then try again to go back to 6.1.x

PS: I don't know if such a downgrade marathon will work properly 😛

[reaper]

have you rebooted after the upgrade ?

have you verified if there's enough space available for the image to be uploaded (and unpacked) on your root partition? you may need to delete a couple maintenance releases to free up space

[DKanta]

Hi Reaper,

I have rebooted the firewall, and before start all this activity i did a factory reset.

This morning i have upgraded it to 7.0.16, as recommended by vsys_remo, but still i can't downgrade.

Regards,

Daniele

[BPry]

@DKanta,

Have you verified that you actually have enough room to download and unpack the image as Reaper stated, that's usually where I see errors like this. In addition I would try running a 'request system software check' on the cli and just verify that what you are seeing in the GUI is actually matching what you see in CLI.