You can upgrade the CN-Series firewall from PAN-OS 10.1.x to PAN-OS 10.2.x.,11.0.x or
11.1.x. You can also upgrade CN-Series firewall from PAN-OS 10.2.x to 11.0.x or
11.1.x. However, there is no direct upgrade path for the CN-Series when going from
PAN-OS 10.0. to PAN-OS 10.2. Instead, you must delete your existing CN-Series
firewall deployment and then redeploy.