Downgrade a VM-Series Firewall to a Previous Release
Use the following workflow to restore the
configuration that was running before you upgraded to a different
feature release. Any changes made since the upgrade are lost. Therefore,
it is important to back up your current configuration so you can
restore those changes when you return to the newer release.
you are downgrading from an XFR release to an older major PAN-OS
release, such as PAN-OS 9.0.3 XFR to PAN-OS 8.1.3, you must first
downgrade to the major PAN-OS release that corresponds to the XFR
release. For example, to get from PAN-OS 9.0.3 XFR to PAN-OS 8.1.3,
you must first downgrade from PAN-OS 9.0.3 XFR to PAN-OS 9.0.0 (non-XFR).
the following procedure to downgrade to a previous release.
Save a backup of the current configuration file.
Although the firewall automatically
creates a backup of the configuration, it is a best practice to
create a backup before you upgrade and store it externally.
Export named configuration snapshot
Select the XML file that contains your running configuration
) and click
export the configuration file.
Save the exported file to a location external to the
firewall. You can use this backup to restore the configuration if
you have problems with the downgrade.
Install the previous feature release image.
Autosave versions are created when you upgrade to
a new release.
for available images.
Locate the image to which you want to downgrade. If
the image is not already downloaded, then
After the download completes,
Select a Config File for Downgrading
which the firewall will load after you reboot the device. In most
cases, you should select the configuration that was saved automatically
when you upgraded from the release to which you are now downgrading.
For example, if you are running PAN-OS 9.0 and are downgrading to
PAN-OS 8.1.3, select
After the installation completes successfully, reboot
using one of the following methods:
If you are prompted to reboot, click
If you are not prompted to reboot, go to Device Operations