How to Update Specific Versions of Content via the CLI

Y.Narita347153 — Fri, 28 Aug 2026 08:28:12 GMT

Hello Palo Alto Networks Support Team,

I would like to ask about the current method for updating content via the CLI.

Previously, we used the following command to install a specific content version:

request content upgrade download <content version>

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-upgrade/cli-commands-for-upgrade/use-cli-commands-for-upgrade-tasks

However, it appears that this command is no longer available.

At the same time, it is still possible to download and install a specific content version through the GUI.

Could you please advise whether there is a current CLI method to download or install a specific content version?

If so, would you be able to provide the relevant command and any applicable documentation?

Thank you for your assistance.

Best regards,

Re: How to Update Specific Versions of Content via the CLI

emr_1 — Fri, 28 Aug 2026 09:12:38 GMT

As you know, we can download specific content version via GUI, so let's debug it.

Here is my result:

========= RemoteCall: DynamicUpdates.executeContentAction ========= [2026/08/28 17:57:09] [44m panui_core\mgmt\MSConnection [0m (DEBUG) 2302836 8602855971214498 - - socket 50 sending request <request cmd="op" cookie="8602855971214498" refresh="no"> <operations xml="yes"> <request> <content> <upgrade> <download> <file>panupv2-all-contents-9130-10174</file> </download> </upgrade> </content> </request> </operations> </request> [2026/08/28 17:57:09] [41m ExtDirect_Router [0m (INFO) 2188567 8602855971214498 - - Call to [PanDirect.run] /DeviceDirect.refreshSession from router.php [2026/08/28 17:57:09] [42m PanDirect [0m (INFO) 2188567 8602855971214498 - - ========= RemoteCall: DeviceDirect.refreshSession ========= [2026/08/28 17:57:09] [44m panui_core\mgmt\MSConnection [0m (DEBUG) 2188567 8602855971214498 - - socket 45 sending request <request cmd="op" cookie="8602855971214498" refresh="yes" skip-audit="yes"> <operations xml="yes"> <show> <cli> <idle-timeout/> </cli> </show> </operations> </request> [2026/08/28 17:57:09] [44m panui_core\mgmt\MSConnection [0m (DEBUG) 2188567 8602855971214498 - - socket 45 response took 0.044s <response status="success"> <result> <idle-timeout>3600</idle-timeout> <remaining>3600</remaining> </result> </response> [2026/08/28 17:57:09] [41m ExtDirect_Router [0m (INFO) 2188567 8602855971214498 - - Call to [PanDirect.run] /DeviceDirect.refreshSession from router.php took 0.058s [2026/08/28 17:57:11] [44m panui_core\mgmt\MSConnection [0m (DEBUG) 2302836 8602855971214498 - - socket 50 response took 2.465s <response status="success" code="19"> <result> <msg> <line>Download job enqueued with jobid 10150</line> </msg> <job>10150</job> </result> </response> [2026/08/28 17:57:11] [41m ExtDirect_Router [0m (INFO) 2302836 8602855971214498 - - Call to [PanDirect.execute] /DynamicUpdates.executeContentAction from router.php took 2.477s

From above, "<request> <content> <upgrade> <download> <file>panupv2-all-contents-9130-10174" seems to be valuable command.

Even CLI does not suggest us that "file" is valid prompt as below, it worked on my platform (pavm with 12.1.6)

==========

> request content upgrade download ?
+ force Force install even autocommit is not done
+ latest Most recent content package
+ sync-to-peer Send a copy to HA peer
<Enter> Finish input

> request content upgrade download file panupv2-all-contents-9130-10174

Download job enqueued with jobid 10151
10151

> show jobs id 10151

Enqueued Dequeued ID Type Status Result Completed
------------------------------------------------------------------------------------------------------------------------------
2026/08/28 17:59:05 17:59:05 10151 Downld FIN OK 17:59:26
Warnings:

Details:File successfully downloaded

Successfully downloaded
Applications and Threats version: 9130-10174

==========

Try on your platform.

Note: I'm not PAN employee, so I can't help you with official reply.

Re: How to Update Specific Versions of Content via the CLI

Y.Narita347153 — Fri, 28 Aug 2026 10:58:54 GMT

Thank you for your response.

I was able to download the content package using the method you provided.

Could you also advise whether it is possible to specify a particular version during installation in the same manner?

I attempted to install the content package using the command below; however, although the command was accepted, the installation ultimately failed with an error.

> request content upgrade install skip-content-validity-check yes file panupv2-all-apps-9140-10212

Content cannot be installed. Failed to determine version of content.

topic How to Update Specific Versions of Content via the CLI in Next-Generation Firewall Discussions

How to Update Specific Versions of Content via the CLI

Re: How to Update Specific Versions of Content via the CLI

Re: How to Update Specific Versions of Content via the CLI