Panorama Upgrade from 9.1.12-h3 to 9.1.13-h3

[JohnSmock]

I am trying to upgrade my Panorama from version 9.1.12-h3 to 9.1.13-h3.

I download 9.1.13-h3

I install 9.1.13-h3

After reboot and I wait for logon service to be ready...

I can get to the main HTTPS page and see my company branded logo and by custom message on the login page like normal.

When I try to login with either my local admin account or my AD accounted handled via LDAP authentication, the webpage will just sit there spinning for what feels like an eternity (maybe 5 min) before it times out and give me a "Error 500: Internal Server Error".

So, I can get the webpage to come up, but I am not able to login here...

I am able to use the same credentials and connect via SSH.

For now, I connect to SSH and run command "debug swm revert" to change back to my previous PAN-OS version and then restart.  At this point, I am back to ver 9.1.12-h3 and it works fine.

I did go ahead and upgrade from 9.1.12-h3 to 9.1.12-h4 and all is good there.  So, it only happens when I am going to 9.1.13.-h3.

Anyone seen this or anything like it?  I have a support ticket open and they are escalating to their engineers.

One I idea I had was to downgrade back to 9.1.12 (no H), then upgrade to 9.1.13 (no H), then up to 9.1.13-h3.

Do you all think that is worth a try?  I don't think I could hurt it any...

[PavelK]

Hello @JohnSmock sorry to hear you are facing an issue.

I have upgraded my 6x M-200 (2x Panorama and 4x Log Collectors) units to 9.1.13-h3. None of them faced any issue. I do not believe that there is any know issue in 9.1.13-h3. I also do not think, it is worth to downgrade and then make upgrade to 9.1.13, then to  9.1.13-h3. Personally if I face this issue before downgrading/reverting image, I would just reboot Panorama to see this issue is fixed by reboot or not. Based on this I would make a decision whether it is worth to dig further or downgrade.

Kind Regards

Pavel

[JohnSmock]

Thanks for the reply.  I did reboot it a few times hoping that would help.  It just fails to log me in each time via the web interface.

When you upgraded to 9.1.13-h3, what version did you have before?

Also, did you have a similar upgrade path with your firewalls?

[PavelK]

Thank you for reply @JohnSmock

I have upgraded from 9.1.13 to 9.1.13-h3. For Firewalls, I proceed with the upgrade to the same version after Panorama upgrade is completed. Sine we have 150+ Firewalls, typically the moment all upgrades are completed, the new version is out.

Kind Regards

Pavel

[Deric048]

We are experiencing the same issue.  We upgraded form 9.1.10 to 9.1.13-h3  every so often we get the same issue.  Opened a TAC case with Palo but have not heard yet.