On upgrading PANOS to the latest version of 10.1.x in preparation to go to 10.2.x all the licenses go away.
5393
Created On 09/19/24 23:21 PM - Last Modified 09/20/24 18:14 PM
Symptom
Upon recently upgraded PANOS to the latest version of 10.1.x (10.1.14-h2) in preparation to go to 10.2.x the licenses and can't contact palo to pull newer software anymore.
Environment
PANOS-10.1.14-hx
VM firewall on ESXi
Cause
In this case for PAN-OS 10.1.14-h2 vm series plugin 2.1.17 is required. (According to plugin compatibility matrix: https://docs.paloaltonetworks.com/compatibility-matrix/vm-series-firewalls/vm-series-plugin-compatibility).
VM Series plugin version was 2.1.16 which is not compatible.
Resolution
If the vm-series plugin version is less than 2.1.17 then try upgrading the plugin first and then the PAN-OS version.
Note: This holds true for any vm series plugin version. Have the plugin upgraded first with the compatible PAN-OS version and then attempt upgrading the PAN-OS software.
Additional Information
In reference to: https://docs.paloaltonetworks.com/compatibility-matrix/vm-series-firewalls/vm-series-plugin-compatibility)