Downgrade a Firewall to a Previous Feature Release
Table of Contents
11.0
Expand all | Collapse all
-
-
- Upgrade Panorama with an Internet Connection
- Upgrade Panorama Without an Internet Connection
- Install Content Updates Automatically for Panorama without an Internet Connection
- Upgrade Panorama in an HA Configuration
- Migrate Panorama Logs to the New Log Format
- Upgrade Panorama for Increased Device Management Capacity
- Upgrade Panorama and Managed Devices in FIPS-CC Mode
- Downgrade from Panorama 11.0
- Troubleshoot Your Panorama Upgrade
-
- What Updates Can Panorama Push to Other Devices?
- Schedule a Content Update Using Panorama
- Panorama, Log Collector, Firewall, and WildFire Version Compatibility
- Upgrade Log Collectors When Panorama Is Internet-Connected
- Upgrade Log Collectors When Panorama Is Not Internet-Connected
- Upgrade a WildFire Cluster from Panorama with an Internet Connection
- Upgrade a WildFire Cluster from Panorama without an Internet Connection
- Upgrade Firewalls When Panorama Is Internet-Connected
- Upgrade Firewalls When Panorama Is Not Internet-Connected
- Upgrade a ZTP Firewall
- Revert Content Updates from Panorama
-
Downgrade a Firewall to a Previous Feature Release
Downgrade to a previous feature release.
Use the following workflow to restore the
configuration that was running before you upgraded to a different
feature release. Any changes made since the upgrade are lost. Therefore,
it is important to back up your current configuration so you can restore
those changes when you return to the newer feature release. Review
the Upgrade/Downgrade Considerations before
you downgrade a firewall to a previous feature release.
To
downgrade from PAN-OS 11.0 to an earlier PAN-OS release, you must download
and install PAN-OS 10.1.3 or later PAN-OS 11.0 release before you
can continue on your downgrade path to your target PAN-OS release.
Downgrade from PAN-OS 11.0 fails if you attempt to downgrade to
PAN-OS 10.1.2 or earlier PAN-OS 11.0 release.
Use the
following procedure to downgrade to a previous feature release.
- Save a backup of the current configuration file.Although the firewall automatically creates a backup of the configuration, it is a best practice to create a backup before you upgrade and store it externally.
- Export named configuration snapshot (DeviceSetupOperations).Select the XML file that contains your running configuration (for example, running-config.xml) and click OK to export the configuration file.Save the exported file to a location external to the firewall. You can use this backup to restore the configuration if you have problems with the downgrade.Install the previous feature release image.Autosave versions are created when you upgrade to a new release.
- Check Now (DeviceSoftware) for available images.Install PAN-OS 10.1.Downgrading from PAN-OS 11.0 to a previous feature release requires that you first downgrade to PAN-OS 10.1.3 or later PAN-OS 11.0 release. After successfully downgrading to PAN-OS 10.1.3 or later PAN-OS 11.0 release, you can continue downgrading to your target PAN-OS version.
- Locate and Download the PAN-OS 11.0 image.
- Install the PAN-OS 11.0 image.
Locate the target PAN-OS image to which you want to downgrade. If the image is not already downloaded, then Download it.After the download completes, Install the image.Select a Config File for Downgrading, which the firewall will load after you reboot the device. In most cases, you should select the configuration that was saved automatically when you upgraded from the release to which you are now downgrading. For example, if you are running PAN-OS 11.0 and are downgrading to PAN-OS 10.2.2, select autosave-10.2.2.After the installation completes successfully, reboot using one of the following methods:- If you are prompted to reboot, click Yes.
- If you are not prompted to reboot, go to Device Operations (DeviceSetupOperations) and Reboot Device.