VM-Series Deployment Guide
    : Downgrade a VM-Series Firewall to a Previous Release
    Focus
    Download PDF
    Focus
    1. Home
    2. VM-Series
    3. VM-Series Deployment Guide
    4. About the VM-Series Firewall
    5. Upgrade the VM-Series Firewall
    6. Downgrade a VM-Series Firewall to a Previous Release
    Download PDF

    VM-Series Deployment Guide

    Downgrade a VM-Series Firewall to a Previous Release

    Table of Contents

    Downgrade a VM-Series Firewall to a Previous Release

    Use the following workflow to restore the configuration that was running before you upgraded to a different feature release. Any changes made since the upgrade are lost. Therefore, it is important to back up your current configuration so you can restore those changes when you return to the newer release.
    You cannot downgrade the VM-Series firewall from version 10.0.4 or later to version 10.0.3 or earlier.
    Use the following procedure to downgrade to a previous release.
    1. Save a backup of the current configuration file.
      Although the firewall automatically creates a backup of the configuration, it is a best practice to create a backup before you upgrade and store it externally.
      1. Export named configuration snapshot (DeviceSetupOperations).
      2. Select the XML file that contains your running configuration (for example, running-config.xml) and click OK to export the configuration file.
      3. Save the exported file to a location external to the firewall. You can use this backup to restore the configuration if you have problems with the downgrade.
    2. Install the previous feature release image.
      Autosave versions are created when you upgrade to a new release.
      1. Check Now (DeviceSoftware) for available images.
      2. Locate the image to which you want to downgrade. If the image is not already downloaded, then Download it.
      3. After the download completes, Install the image.
      4. Select a Config File for Downgrading, which the firewall will load after you reboot the device. In most cases, you should select the configuration that was saved automatically when you upgraded from the release to which you are now downgrading. For example, if you are running PAN-OS 9.1 and are downgrading to PAN-OS 9.0.3, select autosave-9.0.3.
      5. After the installation completes successfully, reboot using one of the following methods:
        • If you are prompted to reboot, click Yes.
        • If you are not prompted to reboot, go to Device Operations (DeviceSetupOperations) and Reboot Device.

    © 2024 Palo Alto Networks, Inc. All rights reserved.