Upgrade Clarification from Documentation

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Upgrade Clarification from Documentation

L1 Bithead

I found a post on the forum that went inactive about a month ago stating if you are upgrading from 8.1. to 9.1 you should

 

1. Download 9.0.0

2. Install the Preferred 9.0.X release

3. Download 9.1.0

4. Install the Preferred 9.1.X release

 

The documentation below states on Page 9 "For manual upgrades, you must install the base image for a feature release before you upload and install a maintenance release image."

 

 https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/pan-os/9-1/pan-os-new-features/pan-... 

 

This page below suggests from 8.1.x 

1. Download and install the latest preferred PAN-OS 8.1 maintenance release and reboot.

2. Download PAN-OS 9.0.0
3. Download and install the latest preferred PAN-OS 9.0 maintenance release and reboot.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/upgrade-to-pan-os-91/upgrade-the-fi... 

 

Is 9.0.0 and 9.1.0 not a base image for a feature release?

 

3 REPLIES 3

L5 Sessionator

Yes, 9.0.0 and 9.1.0 are both base releases. The "Determine the Upgrade Path to PAN-OS 9.1" tells you to do stepped upgrades from your current release to the latest 9.0.x version before moving to step 4:

 
Then from the 9.1 upgrade doc you follow the links depending on whether you are upgrading a stand alone or HA pair firewall. Same procedure as a 8.x and 9.0, download and install the 9.1.0 base image, then download and install the 9.1.x maintenance release. (Note that the 9.1 upgrade docs tell you to download 9.1.0 [step 5.2 for standalone/step 6.2 for HA] but incorrectly show a picture of installing the 9.0.0 base image [step 5.3/6.3]): 

 

Just to be clear. This document shows only downloading 9.0.0 from 8.1.x as seen in Step 2 below.

 

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/upgrade-to-pan-os-91/upgrade-the-fi... 

 

This page below suggests from 8.1.x 

1. Download and install the latest preferred PAN-OS 8.1 maintenance release and reboot.

2. Download PAN-OS 9.0.0
3. Download and install the latest preferred PAN-OS 9.0 maintenance release and reboot.

 

 

L5 Sessionator

Yes, the Determine the Upgrade Path to PAN-OS 9.1 page just shows the path to get to the latest 9.0.x release, before doing the 9.1 upgrade. I believe PaloAlto wants you to do this as the 9.1.0 base package is assumed to be updating an existing 9.0.x configuration file to 9.1.x format and earlier PAN-OS release configurations might have different options that do not translate correctly to 9.1. After installing the latest 9.0 maintenance release you proceed to Upgrade the Firewall to Pan-OS 9.1

2022-09-20_113125.png

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!