Upgrade or Downgrade Considerations in Prisma SD-WAN ION Release 6.3
Learn about the device upgrade and downgrade considerations for Prisma SD-WAN Release 6.3.
| Where Can I Use This? | What Do I Need? |
|---|
The following section details the upgrade path to Prisma SD-WAN
release 6.3.x. Review the upgrade and downgrade considerations before upgrading to this
release. The table describes the ION element software release naming convention for
release 6.3.x.
| ION ELEMENT SOFTWARE (SW) RELEASE NAMING
CONVENTION |
|---|
| 1st Digit - Primary Release | 2nd Digit - Release Number | 3rd Digit - Main Release Number | 4th Digit - SW Build Number |
| 6 | 3 | 5 | b9 |
Prerequisite—Prior to upgrading branch ION devices to 6.1.x, ensure that all data center
ION devices are running ION software version 5.4.x or higher.
Upgrade Or Downgrade Path
Use the following paths to upgrade to release 6.3.x, and use the path in reverse to rollback to
the version you started from. When deciding which ".x" release to upgrade to, choose the
one with the highest release and build number available.
4.7.1 -> 5.0.x -> 5.1.x -> 5.4.x -> 5.6.x -> 6.1.x -> 6.3.x
4.7.1 -> 5.0.x -> 5.2.x -> 5.5.x -> 5.6.x -> 6.1.x -> 6.3.x
5.0.x -> 5.2.x -> 5.5.x -> 5.6.x -> 6.1.x -> 6.3.x
5.1.x -> 5.4.x -> 5.6.x -> 6.1.x -> 6.3.x
5.2.x -> 5.5.x -> 5.6.x -> 6.1.x -> 6.3.x
5.4.x -> 5.6.x -> 6.1.x -> 6.3.x
6.0.x -> 6.1.x -> 6.3.x
6.2.x -> 6.3.x
Example: Your target release is 6.3.5, and you are currently on 5.6.15. The
appropriate upgrade path in this case is 5.6.x
6.1.x6.3.x.. Assuming the highest available 6.1.x
release in your tenant is 6.1.11-b2, your upgrade sequence would be .
Changes to Behavior in Prisma SD-WAN ION Device Release 6.3.6
App-engine
The App-engine resource limit has been set to 400 MB on platforms with 4 GB of
memory, such as the ION 1200, ION 2000, and ION 1200-S. If the memory
consumption exceeds this limit, the App-engine process will now restart to
prevent resource exhaustion.
Cloud Hosted Service Detection
The method for detecting Cloud Hosted Services has changed. The system will now
learn the domain name from the DNS query instead of the DNS response. If a cloud
hosted domain (CDN) is queried and a custom application is not configured, the
traffic will be classified as SSL rather than the actual cloud service.
Security Policy
A pre-validation step has been added to the security policy compilation process
on low-end platforms (ION 1000, 2000, and 1200S). The system will now check for
available memory before compiling the policy. If insufficient memory is
detected, the policy will be rejected, and an alarm will be raised to help
prevent out-of-memory (OOM) conditions and device reboots. The compilation
process remains memory-intensive and can still lead to OOM issues with large or
complex policies.
Upgrade or Downgrade Considerations in Prisma SD-WAN ION Device
Release 6.3.1
The following table lists the new features that have upgrade or
downgrade impact. Make sure you understand all upgrade/downgrade considerations
before you upgrade to or downgrade from Prisma SD-WAN release
6.3.1.
| Feature | Upgrade Considerations | Downgrade Considerations |
|---|
|
Performance Policy
| When upgrading to device version 6.3.1 or higher, if
a performance policy is not attached to a site, default thresholds
for LQM will be applied for path selection of both real time
applications. After upgrading to 6.3.1 or higher you cannot create /
update LQM and App performance thresholds from the advanced menu
but, they can be deleted. If you are using the advanced menu, prior
to upgrading to 6.3.x, review the Performance Policies and modify
them to align with any configuration in your advanced menu. Any
configured advanced menu values will be ignored by the device after
the upgrade to 6.3.1 or higher. | None |
|
IPv6 BGP Support
| None | Remove the IPv6 configuration before downgrading the
device software version. |
