Upgrade or Downgrade Considerations in Release 5.6.1

The following table lists the new features that have upgrade or downgrade impact. Make sure you understand all upgrade/downgrade considerations before you upgrade to or downgrade from Prisma SD-WAN release 5.6.1.
Feature
Upgrade Considerations
Downgrade Considerations
Enhanced Path Selection
NA
You cannot downgrade ION devices running version 5.6 or higher if you have selected
Use Data Centers for Non Hub Paths
on the ION devices.
To downgrade the ION device, deselect
Use Data Centers for Non Hub Paths
and then downgrade the device.
Stacked Security Policies
You can continue to use both original security policies and stacked security policies after upgrading your ION device to Release 5.6 or higher.
You can access the
Security Policies (Original)
tab, only if you have already configured original security policies. If you have started using Prisma SD-WAN with Release 5.6 or later, you will not be able to view or access the
Security Policies (Original)
tab.
When you upgrade a device running versions lower than 5.6 to version 5.6, and there are original security policy sets on the device, the device transforms the original security policies to stacked security policies. The device creates a new policy set stack for the original security policy set. The device also creates a default policy set from the default rules in the original policies. The default policy set contains three different rules—default-deny, intra-zone-allow, self-zone-allow.
You cannot downgrade ION devices running version 5.6 or higher if you have attached a security stack to the sites having these devices.
To downgrade, remove the security stack and then downgrade the device.
Site Summary Dashboard
NA
You can downgrade your device to a version lower than 5.6, but note that the health score is generated only for devices running versions 5.6 or later.
Syslog Enhancements
  • Syslog over TLS
  • Syslog Profiles
NA
You cannot downgrade ION devices running version 5.6 or higher if you have Syslog TLS or FQDN configured on the ION devices.
To downgrade the ION device, remove the Syslog TLS or FQDN configurations and then downgrade the device.
Multicast Routing
NA
If you have configured multicast on the ION device, then before downgrading, disable multicast on the interface.
If you have configured a Rendezvous Point (RP), delete the RP configuration.

Recommended For You