BugZero | Palo Alto Networks BugID PAN-229865 - Upgrading a PA-220 firewall running a PAN-OS 10.1 ...

Palo Alto Networks - Defect ID: PAN-229865

Upgrading a PA-220 firewall running a PAN-OS 10.1 release fails when the target PAN-OS upgrade version is PAN-OS 10.2.5. Workaround: On your upgrade path to PAN-OS 10.2.5, first upgrade to PAN-OS 10.2.4 and then upgrade to PAN-OS 10.2.5.

Palo Alto Networks - Defect ID: PAN-229865

Upgrading a PA-220 firewall running a PAN-OS 10.1 release fails when the target PAN-OS upgrade version is PAN-OS 10.2.5. Workaround: On your upgrade path to PAN-OS 10.2.5, first upgrade to PAN-OS 10.2.4 and then upgrade to PAN-OS 10.2.5.

Last updated on October 17th, 2025

BugZero Risk Score
6.8 Medium

Overall: 6.8

Severity: 6.4

Community: 7.8

Lifecycle: 10.0

What is the BugZero Risk Score?

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Views: 6

Description

The earliest recollection of this bug is traced back to PAN-OS 10.2.10 - October 17, 2025. This bug is fixed in PAN-OS versions 10.2.6. ( PA-220 firewalls only ) Fixed an issue where upgrading to PAN-OS 10.2.5 failed if the firewall was on a PAN-OS 10.1 release. Upgrading a PA-220 firewall running a PAN-OS 10.1 release fails when the target PAN-OS upgrade version is PAN-OS 10.2.5. Workaround: On your upgrade path to PAN-OS 10.2.5, first upgrade to PAN-OS 10.2.4 and then upgrade to PAN-OS 10.2.5. For more information: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-10-known-and-addressed-issues/pan-os-10-2-10-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-11-known-and-addressed-issues/pan-os-10-2-11-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-12-known-and-addressed-issues/pan-os-10-2-12-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-13-known-and-addressed-issues/pan-os-10-2-13-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-14-known-and-addressed-issues/pan-os-10-2-14-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-15-known-and-addressed-issues/pan-os-10-2-15-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-17-known-and-addressed-issues/pan-os-10-2-17-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-18-known-and-addressed-issues/pan-os-10-2-18-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-5-known-and-addressed-issues/pan-os-10-2-5-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-6-known-and-addressed-issues/pan-os-10-2-6-addressed-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-7-known-and-addressed-issues/pan-os-10-2-7-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-8-known-and-addressed-issues/pan-os-10-2-8-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-9-known-and-addressed-issues/pan-os-10-2-9-known-issues

Change history

2025-10-17 Added: 10.2.17, 10.2.18

2025-10-17 Removed: 10.2.16

2025-10-02 Added: 10.2.17

No changes to display

2025-07-22 Added: 10.2.14, 10.2.8, 10.2.12, 10.2.11, 10.2.15, 10.2.7, 10.2.10, 10.2.5, 10.2.16, 10.2.9, 10.2.13

Relevant Products

Click on a version to see all relevant bugs

Affected versions:10.2.14, 10.2.5, 10.2.17, 10.2.13, 10.2.9, 10.2.15, 10.2.10, 10.2.8, 10.2.18, 10.2.12, 10.2.7, 10.2.11

Fixed versions: 10.2.6

Relevant Products

Click on a version to see all relevant bugs

Affected versions:10.2.14, 10.2.5, 10.2.17, 10.2.13, 10.2.9, 10.2.15, 10.2.10, 10.2.8, 10.2.18, 10.2.12, 10.2.7, 10.2.11

Fixed versions: 10.2.6

Top Palo Alto Networks Defects

6.5Defect ID: PAN-251895
Fixed an issue where enabling inline Cloud Analysis features caused a slow packet buffer leak, which resulted in performance issues and dropped traffic.
6.5Defect ID: PAN-259769
GlobalProtect portal is not accessible via a web browser and the app displays the error ERR_EMPTY_RESPONSE .
6.3Defect ID: PAN-291661
Fixed an issue on Panorama appliances and Log Collectors where, after an upgrade, Elasticsearch intermittently entered into a Red state before automatically recovering.
6.3Defect ID: PAN-296752
Fixed an issue where the firewall experienced high management CPU usage and repeatedly rebooted when attempting to retrieve SMART data.
6.3Defect ID: PAN-297295
( VM-Series firewalls in Microsoft Azure environments only ) Fixed an issue where the firewall repeatedly restarted due to high packet rates on the synthetic path in DPDK mode.

Ready to prevent the next vendor outage?

Get a demo

Palo Alto Networks - Defect ID: PAN-229865

Upgrading a PA-220 firewall running a PAN-OS 10.1 release fails when the target PAN-OS upgrade version is PAN-OS 10.2.5. Workaround: On your upgrade path to PAN-OS 10.2.5, first upgrade to PAN-OS 10.2.4 and then upgrade to PAN-OS 10.2.5.

Palo Alto Networks - Defect ID: PAN-229865

Upgrading a PA-220 firewall running a PAN-OS 10.1 release fails when the target PAN-OS upgrade version is PAN-OS 10.2.5. Workaround: On your upgrade path to PAN-OS 10.2.5, first upgrade to PAN-OS 10.2.4 and then upgrade to PAN-OS 10.2.5.

Last updated on October 17th, 2025

BugZero Risk Score6.8 Medium

Bug Details

Top Palo Alto Networks Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
6.8 Medium