![]() We later upgraded our passive HA firewall to 8.0.7 (PA-3020). ![]() This site does not have Global Protect configured or HA. ![]() This site has: MPLS, IPSEC VPNs, LDAP, Security/NAT/PBF rules, virtual and physical interfaces. Both before and after Panorama pushed without problems. We did this by upgrading to 8.0.0 then rebooting and upgrading to 8.0.7. Ok, as promised we did do some firewall upgrades this week and here are our thoughts.įirst we updated one of our remote sites from 7.1.10 to 8.0.7 (PA-3020). Just know that you wouldn't be following the best practices as recommended and it can cause issues if you don't actually have the disk space required to perform this action. If your not running an effected platform and you know that you have plenty of system space to explode the images you can still use the old upgrade recommendation to keep downtime to a minimal. However with the larger file sizes of the new releases PA started to see some issues with firewalls with limit storage, primarly the PA-200/220, PA-500, PA-2000, and the PA-4000. The old method worked perfectly fine because the firewall is able to explode the base image and the maintenance image installer packages to pick apart all of the pieces and parts required to form an installer image for a direct upgrade to 8.0.6. Upgrade to the latest maintenance release within your current major version then install the base 8.0.0 and restart before proceeding to 8.0.6. Upgrading to a new major version for another with maintenance releases already available was simply to download the base image and the maintenance release, and only install the maintenance release. ![]() Keep in mind that the upgrade procedure best practices recently changed later last year to the following. Also keep in mind that 8.0 does some interesting things with the logs, so that takes a few minutes to get everything working correctly. Would recommend following the recommendation detailed in this document HERE. ![]()
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |