An administrator is considering upgrading the Palo Alto Networks NGFW and central management Panorama version. What is considered best practice for this scenario?

The correct answer is C. Upgrade Panorama to a version at or above the target firewall version. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-upgrade/upgrade-pan-os/upgrade-the- firewall-pan-os/upgrade-firewalls-using-panorama Make sure Panorama is running the same or a later PAN-OS version than you are upgrading to.

Submitted by miguelv· Apr 18, 2026Operate

Question

Options

APerform the Panorama and firewall upgrades simultaneously
BUpgrade the firewall first wait at least 24 hours and then upgrade the Panorama version
CUpgrade Panorama to a version at or above the target firewall version
DExport the device state perform the update, and then import the device state

How the community answered

(43 responses)

A
2% (1)
B
2% (1)
C
88% (38)
D
7% (3)

Explanation

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-upgrade/upgrade-pan-os/upgrade-the- firewall-pan-os/upgrade-firewalls-using-panorama Make sure Panorama is running the same or a later PAN-OS version than you are upgrading to.

Topics

#Upgrade Best Practices#Panorama Management#NGFW Upgrade#Version Compatibility

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice