Recommended PANOS version

[dennislee]

Hi Guys,

I would like to know if there's any resources that provide information about what recommended versions of PANOS to be upgraded to or from? Also, what caveats one might face during the upgrade process?

Thank you,

Dennis

[reaper]

Hi Dennis

There's a 'best practices' for PAN-OS upgrades : Best Practices for PAN-OS Upgrade

For a recommended version it's probably best you come and check here the moment you need advise as the recommended versions tend to change over time as new maintenance release versions become available

currently we recommend : 6.1.16 , 7.0.14 and 7.1.8 (8.0 is still a little too young to be 'recommended')

but please always review the release notes before upgrading as specific conditions may apply

[dennislee]

Thanks, Reaper!

In my situation, we are likely to have newer PA firewalls that runs on PANOS 8.

Would you still suggest that I upgrade my Panorama from 7.0.6 to version 8 so i am able to manage newer firewalls running 8 and at the same time managing older firewalls that is likely to be upgarded to 7.1.8?

Would there be any compatibility issues having Pano 8 managing Panos 7.1.8?

Please kindly advise, thank you.

Cheers,

Dennis

[bradk14]

should be no issues using a higher version of Panorama than the firewall. if anything, you should benefit from it.

regardless, keep in mind the advisory that PA posted here earlier, that the Panorama certificate in most prior versions is expiring in June and that will be detrimental to monitoring and administrating firewalls through Panorama. So you will need to upgrade soon regardless, either to 8 or at least 7.0.15, if not 7.1.9

https://live.paloaltonetworks.com/t5/General-Topics/Panorama-Certificate-Expiration-on-June-16-2017/...

[reaper]

you'll need to upgrade panorama to be on par with the latest OS isntalled on your firewalls. Panorama can manage anyting running it's own major version and 2 lower, but not firewalls running newer versions