Upgrade or Downgrade Considerations in ION
Release 6.1
Learn about the device upgrade and downgrade considerations
for Release 6.1.
| Where Can I Use This? | What Do I Need? |
|---|
The following section details the upgrade path to
release 6.1.x. Review the upgrade and downgrade considerations before upgrading to this
release. The table describes the ION element software release naming convention for
release 6.1.x.
| ION ELEMENT SOFTWARE (SW) RELEASE NAMING
CONVENTION |
|---|
| 1st Digit - Primary Release | 2nd Digit - Release Number | 3rd Digit - Main Release Number | 4th Digit - SW Build Number |
| 6 | 1 | 1 | b1 |
Prerequisite—Prior to upgrading branch ION devices
to 6.1.X, ensure that all data center ION devices are running ION
software version 5.4.x or higher.
Upgrade Or Downgrade Path
Use the following paths to upgrade to release 6.1.x, and use
the path in reverse to rollback to the version you started from:
4.7.1 -> 5.0.x -> 5.1.x -> 5.4.x -> 5.6.x -> 6.1.x
4.7.1 -> 5.0.x -> 5.2.x -> 5.5.x -> 5.6.x -> 6.1.x
5.0.x -> 5.2.x -> 5.5.x -> 5.6.x -> 6.1.x
5.1.x -> 5.4.x -> 5.6.x ->6.1.x
5.2.x -> 5.5.x -> 5.6.x -> 6.1.x
5.4.x -> 5.6.x -> 6.1.x
Upgrade or Downgrade Considerations in ION Device
Release 6.1.1
The following table lists the new features that have upgrade or
downgrade impact. Make sure you understand all upgrade/downgrade considerations
before you upgrade to or downgrade from release
6.1.1.
| Feature | Upgrade Considerations | Downgrade Considerations |
|---|
|
Support for IPv6
| | The device software downgrade will proceed only when
the target device software is compatible with the IP address type.
When the device is unassigned, the controller will revert the
cellular IP address type to the default value. |
Upgrade/Downgrade Path for Virtual Form Factor in FIPS Mode
When upgrading from 6.1.x or 5.6.x to 6.2.x or later images of virtual form
factor (VFF), there may be a disruption of service links, stats/logs connections,
and remote sessions in FIPS mode. This issue is observed only when the VFF in FIPS
mode is upgraded to 6.2.1 or later.
Upgrade or Downgrade Versions
Follow the below steps if you are on a VFF pre-6.2.1 with FIPS mode enabled
and upgrading to software version greater than or equal to 6.2.1 (includes 6.2.2,
6.3.4, 6.3.5 and 6.4.1), (excluding 6.2.3, 6.3.1, 6.3.2, 6.3.3 already blocked on
the Controller).
- First, disable FIPS mode on VFF.
- Upgrade to the desired software version.
- Then, enable FIPS mode. Enabling FIPS mode can take up to 20 minutes.
The above steps do not apply when upgrading directly from 6.1.x to
6.4.2 or higher.
Considering these known limitations and FIPS certified versions are 6.1.2
and 6.4.2 or higher, for VFF in FIPS mode on any older software version (<
6.2.1), Palo Alto Networks recommend the upgrade path to be 6.4.2 and all later
versions.
