Downgrade a Firewall to a Previous Maintenance Release
Table of Contents
10.1
Expand all | Collapse all
-
-
- Upgrade Panorama with an Internet Connection
- Upgrade Panorama Without an Internet Connection
- Install Content Updates Automatically for Panorama without an Internet Connection
- Upgrade Panorama in an HA Configuration
- Migrate Panorama Logs to the New Log Format
- Upgrade Panorama for Increased Device Management Capacity
- Downgrade from Panorama 10.1
- Troubleshoot Your Panorama Upgrade
-
- What Updates Can Panorama Push to Other Devices?
- Schedule a Content Update Using Panorama
- Panorama, Log Collector, Firewall, and WildFire Version Compatibility
- Upgrade Log Collectors When Panorama Is Internet-Connected
- Upgrade Log Collectors When Panorama Is Not Internet-Connected
- Upgrade a WildFire Cluster from Panorama with an Internet Connection
- Upgrade a WildFire Cluster from Panorama without an Internet Connection
- Upgrade Firewalls When Panorama Is Internet-Connected
- Upgrade Firewalls When Panorama Is Not Internet-Connected
- Upgrade a ZTP Firewall
- Revert Content Updates from Panorama
-
Downgrade a Firewall to a Previous Maintenance Release
Downgrade to a maintenance release
Because maintenance releases do not introduce
new features, you can downgrade to a previous maintenance release
in the same feature release without having to restore the previous
configuration. A maintenance release is a release in which the third
digit in the release version changes, for example a downgrade from
8.1.6 to 8.1.4 is considered a maintenance release downgrade because
only the third digit in the release version is different.
Use
the following procedure to downgrade to a previous maintenance release within
the same feature release.
- Save a backup of the current configuration file.Although the firewall automatically creates a backup of the configuration, it is a best practice to create a backup before you downgrade and store it externally.
- Export named configuration snapshot (DeviceSetupOperations).
- Select the XML file that contains your running configuration (for example, running-config.xml) and click OK to export the configuration file.
- Save the exported file to a location external to the firewall. You can use this backup to restore the configuration if you have problems with the downgrade.
- Install the previous maintenance release image.If your firewall does not have internet access from the management port, you can download the software update from the Palo Alto Networks Support Portal. You can then manually Upload it to your firewall.
- Check Now (DeviceSoftware) for available images.
- Locate the version to which you want to downgrade. If the image is not already downloaded, then Download it.
- After the download completes, Install the image.
- After the installation completes successfully, reboot
using one of the following methods:
- If you are prompted to reboot, click Yes.
- If you are not prompted to reboot, go to Device Operations (DeviceSetupOperations) and Reboot Device.