Determine the Upgrade Path to PAN-OS 11.0
Table of Contents
11.0
Expand all | Collapse all
-
-
- Upgrade Panorama with an Internet Connection
- Upgrade Panorama Without an Internet Connection
- Install Content Updates Automatically for Panorama without an Internet Connection
- Upgrade Panorama in an HA Configuration
- Migrate Panorama Logs to the New Log Format
- Upgrade Panorama for Increased Device Management Capacity
- Upgrade Panorama and Managed Devices in FIPS-CC Mode
- Downgrade from Panorama 11.0
- Troubleshoot Your Panorama Upgrade
-
- What Updates Can Panorama Push to Other Devices?
- Schedule a Content Update Using Panorama
- Panorama, Log Collector, Firewall, and WildFire Version Compatibility
- Upgrade Log Collectors When Panorama Is Internet-Connected
- Upgrade Log Collectors When Panorama Is Not Internet-Connected
- Upgrade a WildFire Cluster from Panorama with an Internet Connection
- Upgrade a WildFire Cluster from Panorama without an Internet Connection
- Upgrade Firewalls When Panorama Is Internet-Connected
- Upgrade Firewalls When Panorama Is Not Internet-Connected
- Upgrade a ZTP Firewall
- Revert Content Updates from Panorama
-
Determine the Upgrade Path to PAN-OS 11.0
Upgrade path planning for PAN-OS 11.0.
When you upgrade from one PAN-OS feature release version
to a later feature release, you cannot skip the installation of
any feature release versions in the path to your target release.
In addition, the recommended upgrade path includes installing the
latest maintenance release in each release version before you download
the base image for the next feature release version. To minimize
downtime for your users, perform upgrades during non-business hours.
For
manual upgrades, Palo Alto Networks recommends installing and upgrading
from the latest maintenance release for each PAN-OS release along your
upgrade path. Do not install the PAN-OS base image for a feature
release unless it is the target release you want to upgrade to.
Determine
the upgrade path as follows:
- Identify which version is currently installed.
- From Panorama, select PanoramaManaged Devices and check the Software Version on the firewalls you plan to upgrade.
- From the firewall, select DeviceSoftware and check which version has a check mark in the Currently Installed column.
(PAN-OS 11.0.5 and later 11.0 releases) View the preferred releases.- From Panorama, click PanoramaSoftware, and disable (clear) the Base Releases checkbox.
- From firewall, click DeviceSoftware, and disable (clear) the Base Releases checkbox.
Identify the upgrade path:Review the known issues and changes to default behavior in the Release Notes and Upgrade/Downgrade Considerations for each release through which you pass as part of your upgrade path.Installed PAN-OS Version Recommended Upgrade Path to PAN-OS 11.0 10.2.x- If you are already running a PAN-OS 10.2 release, you can upgrade directly to PAN-OS 11.0
10.1.xYou can now use the Skip Software Version Upgrade feature to skip software versions when upgrading your device from PAN-OS 10.1 or later releases.- If you are already running a PAN-OS 10.1 release, you can upgrade directly to PAN-OS 11.0.
10.0.x - Download and install the latest preferred PAN-OS 10.0 maintenance release and reboot.
- Download PAN-OS 10.1.0
- Download and install the latest preferred PAN-OS 10.1 maintenance release and reboot.
- Download PAN-OS 10.2.0
- Download and install the latest preferred PAN-OS 10.2 maintenance release and reboot.
- Proceed to Upgrade the Firewall to PAN-OS 11.0.
9.1.x - Download and install the latest preferred PAN-OS 9.1 maintenance release and reboot.
- Download PAN-OS 10.0.0.
- Download and install the latest preferred PAN-OS 10.0 maintenance release and reboot.
- Download PAN-OS 10.1.0
- Download and install the latest preferred PAN-OS 10.1 maintenance release and reboot.
- Download PAN-OS 10.2.0
- Download and install the latest preferred PAN-OS 10.2 maintenance release and reboot.
- Proceed to Upgrade the Firewall to PAN-OS 11.0.
9.0.x - Download and install the latest preferred PAN-OS 9.0 maintenance release and reboot.Review the upgrade/downgrade considerations before upgrading any Log Collectors to the latest PAN-OS 9.0 maintenance release.
- Download PAN-OS 9.1.0.
- Download and install the latest preferred PAN-OS 9.1 maintenance release and reboot.
- Download PAN-OS 10.0.0.
- Download and install the latest preferred PAN-OS 10.0 maintenance release and reboot.
- Download PAN-OS 10.1.0
- Download and install the latest preferred PAN-OS 10.1 maintenance release and reboot.
- Download PAN-OS 10.2.0
- Download and install the latest preferred PAN-OS 10.2 maintenance release and reboot.
- Proceed to Upgrade the Firewall to PAN-OS 11.0.
8.1.x - Download and install the latest preferred PAN-OS 8.1 maintenance release and reboot.
- Download PAN-OS 9.0.0
- Download and install the latest preferred PAN-OS 9.0 maintenance release and reboot.Review the upgrade/downgrade considerations before upgrading any Log Collectors to the latest PAN-OS 9.0 maintenance release.
- Download PAN-OS 9.1.0.
- Download and install the latest preferred PAN-OS 9.1 maintenance release and reboot.
- Download PAN-OS 10.0.0.
- Download and install the latest preferred PAN-OS 10.0 maintenance release and reboot.
- Download PAN-OS 10.1.0
- Download and install the latest preferred PAN-OS 10.1 maintenance release and reboot.
- Download PAN-OS 10.2.0
- Download and install the latest preferred PAN-OS 10.2 maintenance release and reboot.
- Proceed to Upgrade the Firewall to PAN-OS 11.0.
8.0.x - Download and install PAN-OS 8.0.20 and reboot.
- Download PAN-OS 8.1.0.
- Download and install the latest preferred PAN-OS 8.1 maintenance release and reboot.
- Download PAN-OS 9.0.0
- Download and install the latest preferred PAN-OS 9.0 maintenance release and reboot.Review the upgrade/downgrade considerations before upgrading any Log Collectors to the latest PAN-OS 9.0 maintenance release.
- Download PAN-OS 9.1.0.
- Download and install the latest preferred PAN-OS 9.1 maintenance release and reboot.
- Download PAN-OS 10.0.0.
- Download and install the latest preferred PAN-OS 10.0 maintenance release and reboot.
- Download PAN-OS 10.1.0
- Download and install the latest preferred PAN-OS 10.1 maintenance release and reboot.
- Proceed to Upgrade the Firewall to PAN-OS 11.0.
7.1.x - Download and install the PAN-OS 7.1.26 maintenance release and reboot.
- Download PAN-OS 8.0.0.
- Download and install PAN-OS 8.0.20.
- Download PAN-OS 8.1.0.
- Download and install the latest preferred PAN-OS 8.1 maintenance release and reboot.
- Download PAN-OS 9.0.0
- Download and install the latest preferred PAN-OS 9.0 maintenance release and reboot.Review the upgrade/downgrade considerations before upgrading any Log Collectors to the latest PAN-OS 9.0 maintenance release.
- Download PAN-OS 9.1.0.
- Download and install the latest preferred PAN-OS 9.1 maintenance release and reboot.
- Download PAN-OS 10.0.0.
- Download and install the latest preferred PAN-OS 10.0 maintenance release and reboot.
- Download PAN-OS 10.1.0
- Download and install the latest preferred PAN-OS 10.1 maintenance release and reboot.
- Proceed to Upgrade the Firewall to PAN-OS 11.0.