Go to the Software Updates page and download the appropriate PAN-OS release for your device.
On the WebUI of the device, navigate to Device > Software and click "Upload." Browse to locate the downloaded software package, then click OK to upload the file to the device.
Click "Install from File" and select the uploaded file.
Click OK to initiate the upgrade.
Ensure the device or Panorama is connected to a reliable power source as a loss of power during the upgrade could make the device unusable.
Save a backup of the current configuration file by clicking Save named config snapshot on the Device tab of the GUI underSetup or Panorama tab under Setup.
Read the Upgrade/Downgrade Procedures in the Release Notes to determine if there is a minimum Content version required in order to perform the upgrade.
If upgrading devices from Panorama, perform the upgrade to Panorama first by following the steps under Panorama Upgrade.
Following the PAN-OS upgrade, you may need to upgrade associated software. See the Associated Software Versions chart in the Release Notes to make a determination.
Base Version Note: The base version (first release of a major version, such as 5.0.0, 6.0.0, 6.1.0, 7.0.0 or 7.1.0) must be downloaded onto the device first, for the version that it is being upgraded to. Once the base version is downloaded and the 'ACTION' appears as 'Install', the latest release on the same branch can be downloaded and installed.
If upgrading a Palo Alto Networks device from PAN-OS 6.0.6 to 7.0.5:
Note: Direct upgrade from 6.0.x to 7.0.x is not possible. It has to be a stepped upgrade from 6.0.x to 6.1.x and then to 7.0.x.
First download and install only the 6.1.0 base version. After installing, the Palo Alto Networks device requires a reboot for the new OS to take effect. Please do that now.
After the reboot, download only the 7.0.0 base version. The action PAN-OS 7.0.0 changes from "download" to "install." Please Do not installnow.
Download and install 7.0.5. After installing, the Palo Alto Networks device requires a reboot for the new OS to take effect.
Release Notes: To view a description of the changes in each release, including known issues, version features, and resolved issues, click "Release Notes" next to the release.
Deleting old versions
Older versions of the PAN-OS software can be deleted as long as you are no longer running that version, nor have any plans on reverting. If running 6.1.6, then it is OK to delete all 6.0.x and older software versions, even the base versions.
To delete a version click on the to the right hand side of each version downloaded.
If upgrading Panorama itself, then the instructions will be the same as above.
If using Panorama to deploy new software to a Palo Alto Networks Device, reference the following documents for more information: