User-ID agent upgrade consideration

[qafcopa]

Hello,

I have two Palo Alto Firewalls, each running different software version, 7.1.5 and 7.0.7.

Both firewalls connected to the same User-ID agent server. The User-ID agent version is 7.0.5-3

I am planning to upgrade one of the firewall from 7.1.5 to 8.0.1.

Can I keep the User-ID agent 7.0.5.-3 or should I upgrade the User-ID Agent version to 8.0.1-21 version?

What is the impact with the firewall with PAN-OS 8.0.1 if the User-ID Agent still running with the older version 7.0.5-3?

What is the impact with the firewall with PAN-OS 7.0.7 if the User-ID agent running on 8.0.1-21 version?

Please advise & Thanks.

[reaper]

The firewall on PAN-OS 8.0 will keep getting user information from the UserID Agent on lower versions, you will not be able to leverage new features but old functionality will keep working

If the agent is upgraded the older PAN-OS will still be able to get user-id information from but new functionality will not be available to the older PAN-OS