Downgrade from PAN-OS 8.0
The way you downgrade a firewall from PAN-OS 8.0 depends on whether you are downgrading to a previous feature release (where the first or second digit in the PAN-OS version changes, for example, from 8.0.2 to 7.1.7 or from 7.1.6 to 7.0.9) or downgrading to a maintenance release version within the same feature release (where the third digit in the release version changes, for example, from 8.0.2 to 8.0.0). When you downgrade from one feature release to an earlier feature release, you can migrate the configuration from the later release to accommodate new features. To migrate the PAN-OS 8.0 configuration to an earlier PAN-OS release, first restore the configuration for the feature release to which you are downgrading. You do not need to restore the configuration when you downgrade from one maintenance release to another within the same feature release.
- Downgrade a Firewall to a Previous Maintenance Release
- Downgrade a Firewall to a Previous Feature Release
- Downgrade a Windows Agent from PAN-OS 8.0
Always downgrade into a configuration that matches the software version. Unmatched software versions and configurations can result in failed downgrades or force the system into maintenance mode. This only applies to a downgrade from one feature release to another (for example 8.0.0 to 7.1.3), not to downgrades to maintenance releases within the same feature release version (for example, 7.1.7 to 7.1.2).
If you have a problem with a downgrade, you may need to enter maintenance mode and reset the device to factory default and then restore the configuration from the original config file that was exported prior to the upgrade.