Upgrade PAN-OS 7.0.9 to 7.1.6

[qafcopa]

Hi,

We are planning to upgrade the PAN-OS software from 7.0.9 to 7.1.6. I read on some articles that the base image does not need to be installed.

I have two options as follows:

Option 1:

• 7.1.0 (Download, NO install).
• 7.1.6 (Download and install).

Option 2:

• 7.1.0 (Download and install).
• 7.1.6 (Download and install).

Which one is correct?

[FJU-ITCS]

Hi,

both 🙂

Option 1 is not working on a PA-200, but for the rest yes and you need only one reboot. The second works on all devices, but you must reboot the Firewall twice.

[TranceforLife]

Hi,

Option one as your base image already 7.0.1 installed:

[BPry]

@FJU-ITCS I've actually done this perfectly fine on a PA-200 (not the exact versions obviously). As long as you have installed 7.0.1 then on any PA you just need to make sure you have downloaded 7.1.0 to get all of the dependant bits and bytes before you perform the 7.1.6 install.

I believe that the reason PA does this is to avoid pushing out larger update files than needed for people to upgrade in the same software path; most devices are switching to this model instead of just downloading a full system image because it takes longer and saves bandwidth on their own servers since everybody isn't downloading massive files. 

[fatboy1607]

Option 1 :-  should work for you in case of PA 200 you need to click install but dont reboot firewall , then go ahead download and install 7.1.6 should work for you.

Thanks.