Downgrade PAN-OS
Table of Contents
11.0 (EoL)
Expand all | Collapse all
-
-
- Upgrade Panorama with an Internet Connection
- Upgrade Panorama Without an Internet Connection
- Install Content Updates Automatically for Panorama without an Internet Connection
- Upgrade Panorama in an HA Configuration
- Migrate Panorama Logs to the New Log Format
- Upgrade Panorama for Increased Device Management Capacity
- Upgrade Panorama and Managed Devices in FIPS-CC Mode
- Downgrade from Panorama 11.0
- Troubleshoot Your Panorama Upgrade
-
- What Updates Can Panorama Push to Other Devices?
- Schedule a Content Update Using Panorama
- Panorama, Log Collector, Firewall, and WildFire Version Compatibility
- Upgrade Log Collectors When Panorama Is Internet-Connected
- Upgrade Log Collectors When Panorama Is Not Internet-Connected
- Upgrade a WildFire Cluster from Panorama with an Internet Connection
- Upgrade a WildFire Cluster from Panorama without an Internet Connection
- Upgrade Firewalls When Panorama Is Internet-Connected
- Upgrade Firewalls When Panorama Is Not Internet-Connected
- Upgrade a ZTP Firewall
- Revert Content Updates from Panorama
-
End-of-Life (EoL)
Downgrade PAN-OS
Downgrade your firewall from PAN-OS 11.0
The way you downgrade a firewall from PAN-OS 11.0 depends
on whether you are downgrading to a previous feature release (where
the first or second digit in the PAN-OS version changes, for example,
from 9.1.2 to 9.0.8 or from 9.0.3 to 8.1.14) or downgrading to a
maintenance release version within the same feature release (where
the third digit in the release version changes, for example, from
8.1.2 to 8.1.0). When you downgrade from one feature release to
an earlier feature release, you can migrate the configuration from
the later release to accommodate new features. To migrate the PAN-OS
11.0 configuration to an earlier PAN-OS release, first restore the
configuration for the feature release to which you are downgrading. You
do not need to restore the configuration when you downgrade from
one maintenance release to another within the same feature release.
- Downgrade a Firewall to a Previous Maintenance Release
- Downgrade a Firewall to a Previous Feature Release
- Downgrade a Windows Agent
Always downgrade into a configuration
that matches the software version. Unmatched software versions and
configurations can result in failed downgrades or force the system
into maintenance mode. This only applies to a downgrade from one feature
release to another (for example 9.0.0 to 8.1.3), not to downgrades
to maintenance releases within the same feature release version
(for example, 8.1.3 to 8.1.1).
If you have a problem with
a downgrade, you may need to enter maintenance mode and reset the
device to factory default and then restore the configuration from
the original config file that was exported prior to the upgrade.