topic Re: Software upgrade in Next-Generation Firewall Discussions

Software upgrade

jcrab64 — Fri, 11 Aug 2023 14:08:42 GMT

Hi all,

Relatively new to palo and needing to do my first code upgrade. I need to upgrade from 9.1.5 to 10.1.6. This article has confused me a little: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os/determine-the-upgrade-path

It says download 10.0.0 but doesn’t mention installing it like the the preferred release version. Do I need to download and reboot into 10.0.0?

Thanks

Re: Software upgrade

BPry — Fri, 11 Aug 2023 14:12:56 GMT

@jcrab64

You just need to download it. The firewall will explode both images to disk to build a functional upgrade image for the target maintenance release, to do so the base image simply needs to be downloaded so it has the bits.

Re: Software upgrade

jcrab64 — Fri, 11 Aug 2023 14:27:00 GMT

Thank you!

Re: Software upgrade

JFelibert — Sat, 10 Feb 2024 01:50:38 GMT

Please suggest how to upload the base image to VM manually, without internet access

Re: Software upgrade

zahmed01 — Mon, 12 Feb 2024 16:28:26 GMT

Hi @jcrab64,

As @BPry mentioned you only need to download the base image and then download and install a later 10.0.x version you want to go to. Then you would download the 10.1.0 base and download and install the 10.1.x version that you want.

Thanks,

Re: Software upgrade

JFelibert — Mon, 12 Feb 2024 17:22:55 GMT

Thank you @zahmed01

The issue is that the device is not conencted to Internet and the upload has to be done manually. It is currently in 10.1.11. However, for this KVM NGFW, the base image version PA-VM-KVM-10.2.0.qcow2 says "Invalid Image" when I tried to upload it using GUI: Device > Software.

The procedure is not clear when the device is not connected to the Internet to check images.

Re: Software upgrade

zahmed01 — Mon, 12 Feb 2024 18:00:29 GMT

Hi @JFelibert ,

Since you mentioned that you are running into an issue with the error "Invalid Image" when you try to upload it to the GUI: Device > Software, you should open a case with TAC so they can check with their VM team to see if this is a new issue or what the cause could be and provide tips on how to do it manually for your VM if possible.

Thanks,