Panorama - VM Hardware version

[securehops]

I have a Panorama VM that is running in production for many years now.   Currently, the VM hardware version is 7

I recently switched from legacy mode to panorama mode.  I had no issues during this process.  However, ever since then, our backup software seems to crash Panorama.  Panorama becomes unreachable and a reboot is necessary to resolve.

Our Panorama is has 8 CPU, the guide mentions that minimum should be 16 CPU.  However, since the VM is running hardware version 7, 8 CPU is the max.  Is it safe to upgrade the vm hardware version?

I'm not confident the CPU is the reason why the backup software is crashing the appliance but it needs to be 16 cpu to get technical support from palo

[S.Cantwell]

Hi there

You appear to be running an out of support version of software with the 7.x 

Is there a reason why your company has not upgraded in nearly 7 years?  Just more of a curiosity on this one.  😛

As far as Panorama, can you please provide information on your need/requirement to change from Legacy to Panorama mode?

I believe Panorama mode was supported in 8.1.x software (and if you are running in 7.x) then maybe (not sure) this could be a symptom.

For upgrading the VM Panorama, you would need to have a valid maintenance contract, and go through getting the latest Dynamic Updates, and then upgrade from 7.x to 8.0 (reboot), from 8.0 to 8.1, then to 9.0, then 9.1, with reboots after every major version.

In the alternative (if you have a maintenance contract) you could also download a FRESH 9.1 image, get it up and running, and then export your older config, then import into the new Panorama.

Hope this helps.

What additional questions can we answer for you?

[securehops]

@S.Cantwell sorry for the confusion.  My Panorama is actually running 9.0.12.   I switched to panorama mode from legacy, because I'm planning to upgrade to 10.x.   It was my understanding that legacy mode was not supported in 9.1(+above).  Palo documentation states they do not recommend legacy mode.

I'm running the Panorama VM on esxi 6.7, but the virtual machine hardware version is 7 (vmx-07).    This is from when it was originally deployed.  The problem is VM hardware vmx-07 has a max CPU of 8.   What I'm not clear on is if I can upgrade the hardware version of the VM to vmx-10.   If I can't increase the hardware version, then I can't increase the CPU.

As you stated, one option is to deploy a new OVA and restore config.  The issue I have with that is, it seems like this would be something that have to continue to happen, as years go by.  As I'm sure you are aware, every time you do this, you lose all your logs.   Seems like there should be an easier way

[Tobi]

That's an interesting question. Can someone answer this?

[PhilBoe]

Hi,

maybe the backup system is trying to take quiesced snapshots, which is not supported:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POL6CAO
It might be that it has worked fine in the past, but with recent versions it might crash certain processes.

All new versions require/ come with vmx-10 hardware version:
https://docs.paloaltonetworks.com/compatibility-matrix/vm-series-firewalls/vms-series-hypervisor-sup...

Hope this helps.
regards, Philippe