NGFW-ENGINEER · Question #37
Before upgrading a Palo Alto Networks firewall to a new PAN-OS version, which preliminary step is crucial to ensure a smooth upgrade process?
The correct answer is B. Back up the current configuration. Backing up the current configuration is the single most critical pre-upgrade step. If the upgrade fails, introduces unexpected behavior, or causes a rollback scenario, having a known-good configuration backup ensures you can restore the firewall to its previous working state…
Question
Before upgrading a Palo Alto Networks firewall to a new PAN-OS version, which preliminary step is crucial to ensure a smooth upgrade process?
Options
- ADisable all security policies.
- BBack up the current configuration.
- CReset the firewall to factory settings.
- DDisable High Availability (HA) if configured.
How the community answered
(27 responses)- A7% (2)
- B89% (24)
- D4% (1)
Explanation
Backing up the current configuration is the single most critical pre-upgrade step. If the upgrade fails, introduces unexpected behavior, or causes a rollback scenario, having a known-good configuration backup ensures you can restore the firewall to its previous working state. Disabling security policies or resetting to factory settings would disrupt production traffic. While disabling HA can be part of a controlled upgrade procedure, it is not universally required and is secondary to having a configuration backup. Palo Alto Networks documentation consistently lists configuration backup as the top prerequisite before any upgrade.
Topics
Community Discussion
No community discussion yet for this question.