Upgrading PanOS from 9.1 to target version 10

[MohammadRamadanA.Hafiez]

Hello Bros'

               currently we are in the PanOS version 9.1.x and according to this link https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary this version will be EOL by 12/2023.

from this I can understand that the all version of 9.1 will be EOL, means I will have to move to the PanOS version 10.

If my above was correct, what is the current PanOS 10 target version, knowing that we have been so avoiding version 10 and it's AI capability because of bad history with our collaboration services that suffered alot of issues when we have tried to upgrade to PanOS10.

our collaboration services and call center from CIsco, so Any one had a similar environment with stable PanOS 10 installed.

any Ideas will be wilcommed.

TIA

[Raido_Rattameister · Accepted solution]

You must go through 10.0 but don't stay there because 10.0 is end of life already.

You can go either to 10.1 or 10.2

Check release notes for both and "what's new" section to decide.

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes

By the time you perform upgrade TAC suggested preferred release might have been changed. This is current state today.

I would not recommend to go below 10.2.4 as there are quite a few bugs fixed in this release (reports, userid etc) so you might want to wait until 10.2.4 becomes preferred before upgrade.

I have 10.1, 10.2 and 11 all working fine with CUCM. What issues did you encounter?

[MohammadRamadanA.Hafiez]

Hello @Raido_Rattameister  

                     Thank you so much for the detailed answer, I will contact the TAC for the upgrade and will attach your response.

Regarding the issues met, It was a for no reasons ip phone re-registering from time to another, and a similar issues for the Cisco Finesse call center CCX agents.

[JimMcGrady]

I had a good experience with 9.1. However we've found all of the 10.1.x versions to be slow in terms of log viewing and reporting. Is 10.2 or 11 more spritely?

[MohammadRamadanA.Hafiez]

From ny side, i don't know I hope i get an answer to this too.

Way or another we are going to upgrade as the 9.1 will go EOL by end of 2023

[JimMcGrady]

There seems to be very little comment in this forum regarding the pros and cons of each version.