So we are at 9.0.11 and upgrading to 9.1.6. I was under the impression that you had to actually install 9.1.0 and then install 9.1.6, but a co-worker is saying that he has been able to upgrade to 9.1.6 directly by just downloading 9.1.0 and 9.1.6 and installing 9.1.6 right from 9.0.11.
Is that right? Doesn't feel right.
Sometimes urban legends spread ;)
Thanks! That didn't sound right, but since it was coming from my SME, who is often right, I wanted to check.
I have been told that downloading both the base version and the maintenance version without installing in between can lead to corruption of the base version. Is there any truth to that?
Thanks Reaper. One more question, the firewall has no internet connectivity, willI uploading base image via, "upload to device(do not install) " option, and then install 9.1.9 from panaroma, work.
I have a similar case wherein we are trying to upgrade a PA firewall running 9.0.12 to 9.1.9 via panaroma only. Downloaded the base 9.1.0 and 9.1.9 on panaroma, and when installing 9.1.9 it gives an error - The required base image must be loaded before this image can be loaded.
is there any way to sort this out via panorama only, not by manually installing on the firewall?
This is, in fact, totally fine :) The x.x.0 images are base OS files and the x.x.Y are updates. To upgrade from a previous code train you need to have both, but the firewall is able to extract both files at once and upgrade to the later maintenance version immediately. The only "but" is that some older chassis (30x0 and 200 mostly) have barely enough disk space to hold both unpacked install files and could fail during the unpacking if you skip the base (this can then be fixed by installing, but not rebooting the base, and then the maintenance version)