Determine the Upgrade Path to PAN-OS 9.0

Determine the upgrade path from your current PAN-OS version to PAN-OS 9.0.
When you upgrade from one PAN-OS feature release version to a later feature release, you cannot skip the installation of any feature release versions in the path to your target release (for example, to get from an 8.0 release version to 9.0, you would also need to install an 8.1 release version). In most cases, the recommended path when moving from one feature release to the next is to download the base image for the next feature release version and then download and install your target maintenance release version. You must have both the base image and the maintenance release image on the firewall for installation to be successful. If the firewall doesn’t have enough disk space to hold both the base image and the maintenance release image, it will delete the base image and you will see an error message when you attempt to install the maintenance release. In this case you will need to re-download and install the base image before you can download and install the maintenance release. To minimize downtime for your users, perform upgrades during non-business hours.
For manual upgrades, you must install the base image for a feature release before you upload and install a maintenance release image.
Determine the upgrade path as follows:
  1. Identify which version is currently installed.
    • From Panorama, select PanoramaManaged Devices and check the Software Version on the firewalls you plan to upgrade.
    • From the firewall, select DeviceSoftware and check which version has a check mark in the Currently Installed column.
    currently-installed.png
  2. Identify the upgrade path:
    Review the known issues and changes to default behavior in the Release Notes and upgrade/downgrade considerations in the New Features Guide for each release through which you pass as part of your upgrade path.
    Installed PAN-OS VersionRecommended Upgrade Path to PAN-OS 9.0
    8.1.x
    If you are already running a PAN-OS 8.1 release, proceed to Upgrade the Firewall to PAN-OS 9.0.
    8.0.x
    7.1.x
    • Download and install the latest preferred 7.1.x maintenance release and reboot.
    • Download PAN-OS 8.0.0.
    • Download and install the latest preferred 8.0.x maintenance release and reboot.
    • Download PAN-OS 8.1.0.
    • Download and install the latest preferred 8.1.x maintenance release and reboot.
    7.0.x

Related Documentation