10-17-2023 12:34 AM
Hi All,
so planning to upgrade a single VM Panorama and a number of VM-100/300 Firewalls in Azure
Just want to clarify my upgrade sequence is good pls.
current version - 9.1.9
Expected version 10.1.10-h2
Panorama VM upgrade plan:
upgrade from 9.1.9 > 9.1.16
upgrade from 9.1.16 > 10.0
upgrade from 10.0 > 10.0.11-h1
upgrade from 10.0.11-h1 > 10.1.0
upgrade from 10.1.0 to 10.1.10-h2
Panorama does not have internet access so will manually download the updates from Palo Alto SCP
Under Updates/Software Updates i select the 'Panorama Updates' form the drop down - the images to download
are all 'Panorama_pc-x.x.x'
upload these to Panorama and good to go.
with the VM Firewalls - will download images via software update option and upgrade that way.
Just need to clarify that I didn't miss anything and my upgrade sequence is good?
will do backups and health checks etc before/after each backup so that is covered.
thanks in adv
10-17-2023 07:35 AM
You don't list if you're installing and rebooting into each release or just installing. You're upgrade path is available at https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan... so that you can validate things, but it looks like this:
I personally actually wouldn't recommend doing major PAN-OS upgrades on Azure VMs if you don't need to. I've run into multiple issues doing major updates and just started to rebuild these VMs when needed and moving the objects over to the new host. I found this to be far less disruptive and time consuming than dealing with the issues that major upgrades introduced to those instances. Since you're able to migrate IPs and everything else with ease rebuilding doesn't take long at all.
10-17-2023 07:35 AM
You don't list if you're installing and rebooting into each release or just installing. You're upgrade path is available at https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan... so that you can validate things, but it looks like this:
I personally actually wouldn't recommend doing major PAN-OS upgrades on Azure VMs if you don't need to. I've run into multiple issues doing major updates and just started to rebuild these VMs when needed and moving the objects over to the new host. I found this to be far less disruptive and time consuming than dealing with the issues that major upgrades introduced to those instances. Since you're able to migrate IPs and everything else with ease rebuilding doesn't take long at all.
10-17-2023 08:05 AM
Thanks BPry,
we looked at the VM build option but had pushback from the Azure teams - so will use that option as a last resort.
so this is my take then on the process
thanks in adv
10-17-2023 11:22 AM
Hello,
You are correct in your understanding of the process.
Cheers!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
