cloud services plugin update to 5.2.x

[JasonFerris]

Hello,

We run a Panorama VM 10.2.12-h2 software and cloud service plugin 5.1.0-h47. Seems 5.1 cloud plugin is being retired and need to update this by March 15th. 

It also looks like this version supports the recommended version update from Palo in 5.2.0-h69 or later versions. 

Are steps to update the plugin the same as updating the software or can I simply download the 5.2.0-h69 plugin and install and if any issues, just install the previous version?

Looking for help as we won't be updating PAN OS to higher version for a few more months. 

Thank you!

[GwatidzoD]

Hi, 

It seems like a pretty straight forward, non-service impacting upgrade. We are planning to upgrade from 5.1 to 5.2 next week and can share our experience then. Meantime, here is a link for the upgrade steps:

https://docs.paloaltonetworks.com/prisma-access/release-notes/6-1/cloud-services-plugin-for-panorama...

[JasonFerris]

Hello thank you for sharing! Do you have any service connections configured in your panorama? We do run Panorama on a VM as well. 

Step 3 is something we'll have to follow since we are on 5.1 Cloud Service plugin.

If you are upgrading from a Cloud Services plugin of 5.1 or earlier to 5.2 or later, go to PanoraamAdmin Roles<role-profile>, Disable and then Enable the Plugina choice in the Plugins tab, and commit your changes to Panorama (CommitCommit to Panorama).

After upgrading the Cloud Services plugin from 5.1 to 5.2 or later, the previously-configured Roles are not applied to the configuration, even though the configuration appears in the Panorama UI. Without performing the Disable and Enable operation, you cannot view the Cloud Services tab in Panorama.

Let me know how it goes.

Thank you!