An administrator wants to upgrade a firewall HA pair to PAN-OS 10.1. The firewalls are currently running PAN-OS 8.1.17. Which upgrade path maintains synchronization of the HA session (and prevents network outage)?
An administrator wants to upgrade a firewall HA pair to PAN-OS 10.1. The firewalls are currently running PAN-OS 8.1.17. Which upgrade path maintains synchronization of the HA session (and prevents network outage)?
To upgrade a firewall high availability (HA) pair to PAN-OS 10.1 from PAN-OS 8.1.17 while maintaining HA synchronization and avoiding network downtime, the most reliable method is to upgrade one major version at a time. This approach ensures compatibility and minimizes the risk of issues during the upgrade process. Upgrading directly to the target major version or skipping versions could lead to synchronization problems and potentially cause network outages.
Option C When you upgrade from one PAN-OS feature release version to a later feature release, you cannot skip the installation of any feature release versions in the path to your target release. In addition, the recommended upgrade path includes installing the latest maintenance release in each release version before you install the base image for the next feature release version. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os/determine-the-upgrade-path.html
Agree with C
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os/determine-the-upgrade-path
C is correct
C. See TAKUM1y link.
C. See TAKUM1y link.
In my opinion none of the answers are correct: when upgrading, the firewall will reboot and the cluster will run only on one member for a while, so no session synchronisation until it reboots.
Trust me, I did upgrade from 8.x to 10x and than when I did failover up upgrade secondary it went into suspended mode lol....so upgrade one major Version at a time : )