Upgrade PanOS to 9.1 from 8.1

[Networking2017]

Hey all.  I've come up wtih an upgrade plan to get us from 8.1.10 to 9.1.12-h3 based on reading resources.

I would love some feedback on whether this is the correct process.

THanks much.

8.1.10 Current SoftWare Version

5.2.8 Global Protect Version

Firewall A = currently active firewall, firewall B = currently passive firewall)

Download PAN-OS 8.1.21-h1 to both firewalls
Install 8.1.21-h1 and reboot firewall B
Download PAN-OS 9.0.0 to firewall B
Download PAN-OS 9.0.13, install it and reboot firewall B
Install PAN-OS 8.1.21-h1 on firewall A and reboot (when you click reboot a failover is done to firewall B)
Download PAN-OS 9.0.0 to firewall A
Download PAN-OS 9.0.13, install it and reboot firewall A
Download PAN-OS 9.1.0 to both firewalls
Download PAN-OS 9.1.12-h3 to both firewalls
Install PAN-OS 9.1.12-h3 on firewall A and reboot (when you click reboot a failover is done to firewall B)
Install PAN-OS 9.1.12-h3 on firewall B and reboot
To make sure that you can downgrade in case of any problems export the configuration at all of the following steps on both firewalls:

[TomYoung]

Hi @Networking2017 ,

That upgrade plan looks good.  It is a good idea to review this doc -> https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/upgrade-to-pan-os-91/upgrade-the-fi... .

Thanks,

Tom

[Networking2017]

thanks for the feedback and link.

[S_Alad]

Planning upgrade later in the year. Thanks