Focus

Prisma SD-WAN

Upgrade or Downgrade Considerations in Prisma SD-WAN ION Release 6.2

Table of Contents

Features Introduced in Prisma SD-WAN ION Release 6.2

CLI Commands in Prisma SD-WAN ION Release 6.2

Learn about the device upgrade and downgrade considerations for Release 6.2.

Where Can I Use This?	What Do I Need?
Prisma SD-WAN	Active Prisma SD-WAN license

The following section details the upgrade path to Prisma SD-WAN release 6.2.x. Review the upgrade and downgrade considerations before upgrading to this release.

Prerequisite—Prior to upgrading branch ION devices to 6.1.X, ensure that all data center ION devices are running ION software version 5.4.x or higher.

Upgrade Or Downgrade Path

Use the following paths to upgrade to release 6.2.x, and use the path in reverse to rollback to the version you started from:

4.7.1 -> 5.0.x -> 5.1.x -> 5.4.x -> 5.6.x -> 6.1.x -> 6.2.x

4.7.1 -> 5.0.x -> 5.2.x -> 5.5.x -> 5.6.x -> 6.1.x -> 6.2.x

5.0.x -> 5.2.x -> 5.5.x -> 5.6.x -> 6.1.x -> 6.2.x

5.1.x -> 5.4.x -> 5.6.x -> 6.1.x -> 6.2.x

5.2.x -> 5.5.x -> 5.6.x -> 6.1.x -> 6.2.x

5.4.x -> 5.6.x -> 6.1.x -> 6.2.x

Upgrade or Downgrade Considerations in Prisma SD-WAN ION Device Release 6.2.1

Upgrade or Downgrade Considerations in Prisma SD-WAN ION Device Release 6.2.1

The following table lists the new features that have upgrade or downgrade impact. Make sure you understand all upgrade/downgrade considerations before you upgrade to or downgrade from Prisma SD-WAN release 6.2.1.

Feature	Upgrade Considerations	Downgrade Considerations
Used for = control option for Switch Virtual Interfaces (SVI) on all switched ports and sub-interfaces on routed ports		Downgrading to earlier versions if Used for = control interface is configured, is not supported. Contact Customer Support if you want to downgrade your device.

Upgrade/Downgrade Path for Virtual Form Factor in FIPS Mode

When upgrading from 6.1.x or 5.6.x to 6.2.x or later images of virtual form factor (VFF), there may be a disruption of service links, stats/logs connections, and remote sessions in FIPS mode. This issue is observed only when the VFF in FIPS mode is upgraded to 6.2.1 or later.

Upgrade or Downgrade Versions

Follow the below steps if you are on a VFF pre-6.2.1 with FIPS mode enabled and upgrading to software version greater than or equal to 6.2.1 (includes 6.2.2, 6.3.4, 6.3.5 and 6.4.1), (excluding 6.2.3, 6.3.1, 6.3.2, 6.3.3 already blocked on the Controller).

First, disable FIPS mode on VFF.
Upgrade to the desired software version.
Then, enable FIPS mode. Enabling FIPS mode can take up to 20 minutes.

The above steps do not apply when upgrading directly from 6.1.x to 6.4.2 or higher.

Considering these known limitations and FIPS certified versions are 6.1.2 and 6.4.2 or higher, for VFF in FIPS mode on any older software version (< 6.2.1), Palo Alto Networks recommend the upgrade path to be 6.4.2 and all later versions.

Features Introduced in Prisma SD-WAN ION Release 6.2

CLI Commands in Prisma SD-WAN ION Release 6.2

Prisma SD-WAN Docs

Upgrade or Downgrade Considerations in Prisma SD-WAN ION Release 6.2

Prisma SD-WAN Docs