topic Re: Software updates PA-3220 in Panorama Discussions

Software updates PA-3220

Daniel12345 — Thu, 30 May 2024 09:55:47 GMT

Good day,

I was ask to revert to a previous version of software for one of our FW, to do so I had to force a factory reset to the desired version. Which went well, but now either the software or the dynamic tabs are blank. Is there a way to repopulate them via the CLI, our appliances are not connected to internet. Every time I try to upload or install it says software already installed. but not showing anything on the web interface.

Any idea.

Re: Software updates PA-3220

Claw4609 — Thu, 30 May 2024 19:05:28 GMT

Hello,

I would try installing a different version via the cli and see if that version appears. Could also try restarting the web-server and see if that fixes the issue: debug software restart process web-server

You can check currently installed and download/install content updates and Pan-os versions via the CLI. Heres the document for the various commands Use CLI Commands for Upgrade Tasks (paloaltonetworks.com)

Re: Software updates PA-3220

reaper — Fri, 31 May 2024 08:00:28 GMT

try these two commands to populate both the software and content page:

> request system software check

> request content upgrade check

also: to revert to the previously installed OS, use these commande:

> debug swm status (to ensure your previous version is the one you want to go back to)

Partition State Version -------------------------------------------------------------------------------- sysroot0 REVERTABLE 10.2.4-h2 sysroot1 RUNNING-ACTIVE 10.2.7-h3 maint READY 10.2.7-h3

> debug swm revert

> request restart system

this operation rolls back to the previous sysroot partition (so no software installs required, you change the boot partition to the previous one)

Re: Software updates PA-3220

Daniel12345 — Thu, 13 Jun 2024 10:31:08 GMT

Good day,

So these command listed above works if you are connected to internet and have access to palo alto server. Which in our configuration is not possible. So let say for example I have version A,B,C downloaded and version C is the running version. For any reason I need to factory reset to Version B, version A and C will disapeared from the web-gui software interface and only B will now remain. If I want to repopulate the web-gui with all the version already downloaded on the firewall I didn't see any command allowing it. If I try to download the software version from a media it tell me that the file already exist (which make sense since the factory reset doesn't delete them). If I am correct to repopulate the web-gui interface with version A,B,C, I would have to manually delete A,B software pkg on the firewall, and upload them again. There must be a better way. Same goes for the contents/virus threath I presume.

Re: Software updates PA-3220

iaingthompson — Wed, 28 May 2025 18:20:33 GMT

Hi Daniel,

I am also experiencing the same issue. My newly uploaded firmware file shows up when I few the filesystem from the cmdline, however the GUI does not display it.

Re: Software updates PA-3220

iaingthompson — Wed, 28 May 2025 18:23:53 GMT

Thanks for the reply, Reaper. It seems like several people are running into this issue. Is this something PA is actively aware of and working on?

In general, the firmware upgrade process for offline systems can be frustrating.