Upgrade from 9.1.x, to 10.1.x, 10.2.x, 11.x

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Upgrade from 9.1.x, to 10.1.x, 10.2.x, 11.x

L4 Transporter

Upgrade to from 9.1.X, to 11, 10.2.X, 10.1.X ?


Hello, good afternoon, how are you? I have a question regarding which is the recommended version to update from PAN-OS 9.1.X.

Personally I consider that version 10.1.X ( 10.1.8-h2 ) is the recommended version, I feel that version 10.2.X is very recent and version 11, well you know, is much, much more recent.


Now I want to know your opinion, I see comments in certain forums, communities, etc., where they indicate that 10.1.x ( 10.1.8-h2 ) is the better stable option, another 10.2 or 11.


I feel that the 10.2.X version needs to mature, it is still in its 10.2.3h2 version, that is, very few maintenance versions, vs 10.1.X ( 10.1.8-h2 ). I consider that a version of PAN-OS already has a certain maturity, although of course all of them may be prone to certain failures, bugs, etc., but I think that it is just after the maintenance version X.X.7 or X.X.8, it is taking The PAN-OS version matures and stability, at least based on my experience and other people who have told me. Well this is not at all written, there is no exact and official manual that confirms this, but based on the different experiences of colleagues, friends, forums, communities, clients, etc.


What do you think, based on your experiences?


I am very attentive to your comments


Best regards

High Sticker

L7 Applicator

Do you have stand alone firewalls or push config from Panorama?

Enterprise Architect, Security @ Cloud Carib Ltd

Hello @Raido_Rattameister 


Hello, thanks for the prompt response.


Well, a Mix.


Costumers with Panorama in 9.1.X and their StandAlone firewalls and in HA 9.1.X. And others with only firewalls, without PANORAMA, in HA and standalone version pan-os 9.1.14.


I stay tuned, regards

High Sticker

L7 Applicator

10.1 is generally quite good.

If you push templates from Panorama and use firewall built in UserID then don't go to 10.2 before 10.2.4 comes out as this part is broken in 10.2.

SaaS reports have glitches all across 10.1, 10.2 and also in 11.

So all depends on how complex the setup is.

None of those issues have affected packet processing (dataplane) part though.

Enterprise Architect, Security @ Cloud Carib Ltd
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!