Which upgrade path maintains synchronization of the HA session (and prevents network outage)?

An administrator wants to upgrade a firewall HA pair to PAN-OS 10.1. The firewalls are currently running PAN-OS 8.1.17.

Which upgrade path maintains synchronization of the HA session (and prevents network outage)?
A . Upgrade directly to the target major version
B . Upgrade one major version at a time
C . Upgrade the HA pair to a base image
D . Upgrade two major versions at a time

Answer: D

Latest PCNSE Dumps Valid Version with 280 Q&As

Latest And Valid Q&A | Instant Download | Once Fail, Full Refund

Subscribe
Notify of
guest
1 Comment
Inline Feedbacks
View all comments
Volodymyr
Volodymyr
3 years ago

Answer is B
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRrCAK

HA Upgrade NOTE: When upgrading across two major release versions at a time, you will likely experience a network outage. However, if the devices are upgraded one major version at a time, HA will remain active and continue to synchronize sessions and no network outage will be seen.

To maintain HA sync and activity, upgrade the HA pair in tandem one major release at a time.
If you upgrade one device by two major upgrades, the newly upgraded device will stay in suspended mode with the error peer OS too old.
Upgrading one device by two major upgrades, would lead to loss HA functionality and may result in undesirable network impact.