When you upgrade from one PAN-OS feature release version
to a later feature release, you cannot skip the installation of
any feature release versions in the path to your target release
(for example, to get from a PAN-OS 7.1 release to PAN-OS 8.1, you
also need to install a PAN-OS 8.0 release version). In most cases,
the recommended path when moving from one feature release to the
next is to download the base image for the next feature release version
and then download and install your target maintenance release version.
You must have both the base image and the maintenance release image
on the firewall for installation to be successful. If the firewall
doesn’t have enough disk space to hold both the base image and the
maintenance release image, it will delete the base image and you
will see an error message when you attempt to install the maintenance
release. In this case you will need to re-download and install the
base image before you can download and install the maintenance release.
To minimize downtime for your users, perform upgrades during non-business
For manual upgrades, you must install the base
image for a feature release before you upload and install a maintenance
Determine the upgrade path as follows:
which version is currently installed.
From Panorama, select
and check the
Software Version on the firewalls you plan to upgrade.
From the firewall, select
and check which version
has a check mark in the Currently Installed column.
Identify the upgrade path:
Review the known issues and changes
to default behavior in the Release Notes and upgrade/downgrade
considerations in the New Features Guide for
each release through which you pass as part of your upgrade path.
Installed PAN-OS Version
Recommended Upgrade Path to PAN-OS 8.1
If you are already running
a PAN-OS 8.0 release, download and install the PAN-OS 8.0.20 maintenance
release and reboot. You can then proceed to Upgrade the Firewall to PAN-OS 8.1.
install the PAN-OS 7.1.26 maintenance release and reboot.