Panorama and PAN OS upgrade process

How to Upgrade PAN-OS

Note: Before upgrading PAN OS please validate latest stable version.

 

1-      Panorama OS upgrade:

 

Go to Panorama tab---à Software--à check now (as below):

 

Note : Download base version first (suppose you want to upgrade with 6.1.9 then first download 6.0.0 then check click on check now and download 6.1.9 and install it.)

 

 

Ø  Click on download latest stable version 6.1.9 or 7.0.4.

Ø  After download click on install on Panorama first.

 

2-      Now on PAN devices those are added on Panorama:

 

Go to Panorama tab---à Device Deployment-----àSoftware--à check now (as below):

 

Check Now

 

Ø  Click on download latest stable version 6.1.9 or 7.0.4.

Ø  After download click on install on Panorama first.

My personal suggestion is to deploy software one by one on PAN devices instead of at a time.

Base Version Note: The base version (first release of a major version, such as 4.1.0, 5.0.0, 6.0.0 or 6.1.0) must be downloaded onto the device first for the version that is being upgraded to. Once the base version is downloaded and the 'ACTION' appears as 'Install', the latest release on the same branch can be downloaded and installed.

For Example

If upgrading a Palo Alto Networks device from PAN-OS 5.0.5 to 6.1.6:

Note: Direct upgrade from 5.0.x to 6.1.x is not possible. It has to be a stepped upgrade from 5.0.x to 6.0.x to 6.1.x

1. Download and install only the 6.0.0 base version. After installing, the Palo Alto Networks device requires a reboot for the new OS to take effect.
2. Download only the 6.1.0 base version. The action PAN-OS 5.0.0 changes from "download" to "install." Do not install now.
3. Download and install 6.1.2. After installing, the Palo Alto Networks device requires a reboot for the new OS to take effect.

Release Notes: To view a description of the changes in each release, including known issues, version features, and resolved issues, click "Release Notes" next to the release.

Deleting old versions

Older versions of the PAN-OS software can be deleted as long as you are no longer running that version. If running 6.0.6, then it is OK to delete all 5.1.x (Panorama) or 5.0.x (Firewall) software versions, even the base versions.