Upgrade and Downgrade Paths for SD-WAN Plugin
Table of Contents
Expand all | Collapse all
-
-
- Upgrade Panorama with an Internet Connection
- Upgrade Panorama Without an Internet Connection
- Install Content Updates Automatically for Panorama without an Internet Connection
- Upgrade Panorama in an HA Configuration
- Migrate Panorama Logs to the New Log Format
- Upgrade Panorama for Increased Device Management Capacity
- Upgrade Panorama and Managed Devices in FIPS-CC Mode
- Downgrade from Panorama 10.2
- Troubleshoot Your Panorama Upgrade
-
- What Updates Can Panorama Push to Other Devices?
- Schedule a Content Update Using Panorama
- Panorama, Log Collector, Firewall, and WildFire Version Compatibility
- Upgrade Log Collectors When Panorama Is Internet-Connected
- Upgrade Log Collectors When Panorama Is Not Internet-Connected
- Upgrade a WildFire Cluster from Panorama with an Internet Connection
- Upgrade a WildFire Cluster from Panorama without an Internet Connection
- Upgrade Firewalls When Panorama Is Internet-Connected
- Upgrade Firewalls When Panorama Is Not Internet-Connected
- Upgrade a ZTP Firewall
- Revert Content Updates from Panorama
-
Upgrade and Downgrade Paths for SD-WAN Plugin
Upgrade and downgrade path for your SD-WAN plugin version.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
Before you upgrade or downgrade an SD-WAN plugin, you must know what are the appropriate
plugin versions that you can upgrade or downgrade from the currently installed SD-WAN
plugin version on your firewall. Therefore, always refer to the valid upgrade and downgrade paths for your currently installed SD-WAN plugin
version as a first step in your migration plan.
Upgrade and Downgrade Considerations
- If you need to upgrade your SD-WAN plugin, don't upgrade to a release that we released before your currently installed version.For example, we don't support an upgrade from SD-WAN plugin version 3.0.7 to SD-WAN plugin version 3.2.0 because we released SD-WAN plugin version 3.2.0 before SD-WAN plugin 3.0.7.However, you can upgrade from any maintenance release to another maintenance release within the same major or minor release version. For example, you can upgrade from any SD-WAN 2.2 to any other SD-WAN 2.2 plugin release.Refer the upgrade paths and downgrade paths for SD-WAN plugin before upgrading or downgrading your currently installed SD-WAN plugin version.
- If you need to downgrade your SD-WAN plugin, don't downgrade to a release that we released after your currently installed version.For example, we don't support a downgrade from SD-WAN plugin version 3.2.0 to SD-WAN plugin version 3.0.7 because we released SD-WAN plugin version 3.0.7 after SD-WAN plugin 3.2.0.Refer the upgrade paths and downgrade paths for SD-WAN plugin before upgrading or downgrading your currently installed SD-WAN plugin version.
Upgrade Path for SD-WAN Plugin
Interpret the information in the upgrade table as follows:
- Upgrade From (the Current Installed Version)—The current SD-WAN plugin version before the upgrade.
- To Allowed SD-WAN Plugin Version—The list of SD-WAN plugin versions you can upgrade to from the current SD-WAN plugin version.
- To Recommended SD-WAN Plugin Version—The SD-WAN plugin version we recommend you to upgrade to from the current SD-WAN plugin version.
For example, you can upgrade from the SD-WAN plugin version 2.2.1 to SD-WAN
plugin versions 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6,
2.2.7, and later 2.2 releases.
However, out of all the valid SD-WAN plugin versions (2.2.2, 2.2.3, 2.2.4, 2.2.5,
2.2.6, 2.2.7, and later 2.2 releases),
our recommended version is
2.2.7. Note that if you want to
upgrade from SD-WAN 2.2.1 to
3.0.8,
you can't upgrade it directly. You must first upgrade the SD-WAN plugin from 2.2.1
to
2.2.7 (the recommended version)
and then to
3.0.8.
Following are the upgrade paths for the SD-WAN plugin version. When you perform an
SD-WAN upgrade, the target plugin version performs the migration process.
| Upgrade From (the Current Installed Version) | To Allowed SD-WAN Plugin Version | To Recommended SD-WAN Plugin Version |
|---|---|---|
| SD-WAN Plugin 2.2 Versions | ||
|
2.2.1
|
2.2.2 and later 2.2 versions
|
2.2.6
|
|
2.2.2
|
2.2.3 and later 2.2 versions
|
2.2.6
|
|
2.2.3
|
2.2.4 and later 2.2 versions
|
2.2.6
|
|
2.2.4
|
2.2.5 and later 2.2 versions
|
2.2.6
|
|
2.2.5
|
2.2.6 and later 2.2 versions
|
2.2.6
|
|
2.2.6
|
|
3.0.8, 3.1.3, 3.2.2, and
3.3.1.
|
|
2.2.7
|
3.0.8 and 3.2.2
|
3.0.8 and 3.2.2
|
| SD-WAN Plugin 3.0 Versions | ||
|
3.0.0
|
3.0.8
|
—
|
|
3.0.1
|
3.0.5 and
3.0.8
|
—
|
|
3.0.2
|
3.0.5 and
3.0.8
|
—
|
|
3.0.3
|
3.0.5 and
3.0.8
|
—
|
|
3.0.4
|
3.0.5 and
3.0.8
|
—
|
|
3.0.5
|
|
3.0.7-h2, 3.1.3, 3.2.1, and 3.3.0
|
|
3.0.6
|
|
3.0.7-h2, 3.1.3, 3.2.1, 3.3.0, and
3.0.8
|
|
3.0.7
|
|
3.1.3, 3.2.1, 3.3.0, and
3.0.8
|
|
3.0.8
|
SD-WAN plugin 3.0.8 version supports the
Prisma Access hub. |
3.2.2
and 3.3.2.
|
Downgrade Path for SD-WAN Plugin
Interpret the information in the downgrade table as follows:
- Downgrade From (the Current Installed Version)—This is the current SD-WAN plugin version before the downgrade.
- To Allowed SD-WAN Plugin Version—This is the list of SD-WAN plugin versions you can downgrade to from the current SD-WAN plugin version.
Following are the downgrade paths for the SD-WAN plugin version. When you perform an
SD-WAN downgrade, the current plugin version performs the migration process.
| Downgrade From (the Current Installed Version) | To Allowed SD-WAN Plugin Version |
|---|---|
|
2.2.2, 2.2.3, 2.2.4, 2.2.5, and 2.2.6
|
2.2.1
|
|
2.2.3, 2.2.4, 2.2.5, and 2.2.6
|
2.2.2
|
|
2.2.4, 2.2.5, and 2.2.6
|
2.2.3
|
|
2.2.5 and 2.2.6
|
2.2.4
|
|
2.2.6
|
2.2.5
|
|
3.0.7, 3.1.3, 3.2.1, and 3.3.0
|
2.2.6
|
|
3.0.5
|
3.0.0, 3.0.1, 3.0.2, 3.0.3, and 3.0.4
|
|
3.0.6, 3.0.7, 3.1.0-hf, 3.1.1, 3.1.3, 3.2.0, 3.2.1, and 3.3.0
|
3.0.5
|
|
3.0.7, 3.1.3, 3.2.0, 3.2.1, and 3.3.0
|
3.0.6
|
|
3.1.3, 3.2.1, and 3.3.0
|
3.0.7
|
|
3.0.8
|
2.2.1 and later 2.2 versions, 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4,
3.0.5, and 3.0.7.
|
|
3.3.1
|
2.2.6, 3.0.6, 3.0.7, 3.1.3, 3.2.1, and 3.3.0.
|
|
3.2.2
|
2.2.7 and
3.0.8
|
| 3.3.2 |
3.0.8
|