An engineer has been given approval to upgrade their environment to PAN-OS 10.2.
The environment consists of both physical and virtual firewalls, a virtual Panorama HA pair, and virtual log collectors.
What is the recommended order when upgrading to PAN-OS 10.2?
When upgrading to a new PAN-OS version, the recommended order is to start with Panorama, then upgrade the log collectors, and lastly upgrade the firewalls. This order ensures that management systems are compatible with the new PAN-OS version before the firewalls are upgraded. Upgrading Panorama first ensures that it can properly manage and interface with the other devices as they are upgraded. Following this, upgrading the log collectors ensures that the entire logging infrastructure is consistent and can handle the data from firewalls running the new version. Finally, upgrading the firewalls last ensures a smooth transition with minimal disruption to network security operations.
First upgrade the Panorama, then all log collectors at once, followed by the firewalls.
This question appeared on Exam January 2023. It's D.
Should be D
you must first upgrade Panorama and its Log Collectors and then upgrade the WildFire appliance before you upgrade the firewalls.
Correct answer is D
Make sure Panorama is running the same or a later PAN-OS version than you are upgrading to. You must upgrade Panorama and its Log Collectors to 10.2 before upgrading the managed firewalls to this version. In addition, when upgrading Log Collectors to 10.2, you must upgrade all Log Collectors at the same time due to changes in the logging infrastructure. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os/upgrade-firewalls-using-panorama
D chrisy042 is correct!
always start by Panorama D
100% D
On PCNSE exam, april 2024
D is correct
For experience - option D
When upgrading firewalls that you manage with Panorama or firewalls that are configured to forward content to a WildFire appliance, you must first upgrade Panorama and its Log Collectors and then upgrade the WildFire appliance before you upgrade the firewalls. Additionally, it is not recommended to manage firewalls running a later maintenance release than Panorama as this may result in features not working as expected. For example, it is not recommended to manage firewalls running PAN-OS 10.1.1 or later maintenance releases if Panorama is running PAN-OS 10.1.0. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os
D. I attest to the answers mentioned below.