topic Re: Firmware update from USB in General Topics

Firmware update from USB

lzabler — Tue, 14 Feb 2017 16:26:11 GMT

Hello All,

I am new to paloalto firewalls (student in training), I have a PA-500 device and I am trying to update the firmware from 6.0.2 to 6.1.0 from USB. I have tried the following below and still having issues.

1. Directly download into the firewall
2. Download firmware from laptop/desktop

I was wondering though seeing that there is a USB port on the device itself if I could try it from there? I plugged
the USB directly into the device but having trouble finding the USB to get the software I need. I am trying to find
it in the GUI and cannot see it so I assume I can access this through the CLI? Any thoughts, suggestions or
documentation would be helpful.

Thank you for all your help!
lzabler

Re: Firmware update from USB

TranceforLife — Tue, 14 Feb 2017 16:55:32 GMT

Hi,

l usually charge my iPhone over that USB port as l could not find any other use of it. hardware guide says: USB port for future use.

Why do you fail to upgrade when trying direct download or manual?

Thx,

Myky

Re: Firmware update from USB

bmorris1 — Tue, 14 Feb 2017 17:04:54 GMT

Hi Luke,

The USB port at the moment is used only for bootstrapping which is supported in versions 7.1.0 and upwards. And as TranceForLife says, charging your iPhone in the data centre 😉

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/firewall-administration/bootstrap-the-firewall

If you've already uploaded the software image onto the firewall via the GUI it should be appearing in the list to install. Alternatively try seeing if it is available in the CLI if not in the GUI.

> request system software install version <version number>

You can enter a question mark in the CLI to see the available versions.

hope this helps,

Ben

Re: Firmware update from USB

lzabler — Tue, 14 Feb 2017 18:15:09 GMT

Thank you for that information! I thought I was going crazy.

Here are the steps of what I have been doing:

1. In the GUI I go to Device > Software

right away I get an error message that says "Operation Failed - No update available"

2. Then I click on Upload icon and browse to my file.

*GUI in Chrome browser *

- Import Software Package window - C:\fakepath\PanOS_500-6.1.0

- Click ok

- Uploading starts

After the upload goes through I get the same message "PAN OS Saved" and then I get

"Operation Failed - No update available"

3. However I do click on the "Install From File" and notice that the "PanOS_500-6.1.0" file is in there

- I select the file and press "OK"

- It starts operation and the status is active however once it is done I either get "Operation Failed - No update available" or

"device needs to reboot"

4. I reboot the device then check the software version and I am still at version 6.0.2

Question:

Should the device be offline when trying to upload from USB?

Any thoughts or recommendations would be awesome. Thank you for time and helping me.

lzabler

Re: Firmware update from USB

TranceforLife — Tue, 14 Feb 2017 21:16:32 GMT

As per @bmorris1 comment you only can use USB port for Bootstrapping and only if you do have a 7.1.x or above PAN-OS (and not only as an iPhone charger)). Can you try to reinstall already existing PAN-OS from the Software tab? Then try again by manual option. l did it before many times and had no problems.

Re: Firmware update from USB

lzabler — Wed, 15 Feb 2017 13:55:22 GMT

TanceforLife,

Thank you for suggesting that! I reinstalled 6.0.2 and then after that as a test I installed 6.0.3 and it worked! I am not up 6.0.15 (my goal is to get it to the newest firmware which I think is 8 now). When trying to install 6.1.0 I noticed that it gave me an error because it now needs a newer version of Application Software installed Looking to see if I can get that onto USB as well.

Thank you for all your time and help!

lzabler

Re: Firmware update from USB

TranceforLife — Wed, 15 Feb 2017 14:17:40 GMT

Hello,

Yes you can get a new app database locally and do the same way as you did for PAN-OS. Download panupv2-all-apps-662-3850 file>upload>Install from file.

Re: Firmware update from USB

Chris-Gapske — Thu, 31 Aug 2023 15:41:56 GMT

To be honest not being able to upgrade this via serial is pretty weak. It is a major frustration point. Add to that the difference in config to advanced routing.