API for download Dynamic / Software updates

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

API for download Dynamic / Software updates

L1 Bithead


I need to automate downloading dynamic and software updates for my licensed products. 

Is there any API provided by PaloAlto to download updates?



best regards


L4 Transporter

will start an install assuming the version you have the version downloaded.



will start a download.


Both of those calls return a job ID, which can be queried with:


That should cover most of the useful calls. Definitely check out the XML API guide below as well as the API browser (https://IP/api on a firewall from a browser).



L4 Transporter

Hello @marcin.sek,


I used my browser to go to my firewall at


I think that you may be interested in this xpath to start with




I got here by selecting, in this order:

  1. Configuration Commands
  2. Devices
  3. localhost.localdomain
  4. deviceconfig
  5. system
  6. update-schedule

Once you are on that page, you will see that you can futher explore the current settings associated with that which we would find in the UI under Device > Dynamic Updates.


I was not able to find in the API where one can view the software download information. I would caution against trying to schedule a software update, although I do understand that you might want to be able to remotely download, install, and reboot a firewall throught the API after you have identified a software version to which you want to upgrade.

You answered how to download updates from firewall.

Thanks but not really helped.


Paloalto Firewall will be in closed network without access to internet. I have to write a script to automate updates. Script will download updates directly from producer and then manually moved (by cd or pendrive) to closed closed network and firewall should import those updates (also by script).


I need to download updates directly from "paloaltonetworks" and then import them to my firewall.

So is there any API that I could download software updates?


Best regards,

Andrzej Grymkowski


Not sure if this would help, but will the PAN's be managed by a Panorama? Maybe have the Panorama have access to the internet and the PAN's get access only to the Panorama?


Just a thought.

No, there wont by any Panorama.

  • 5 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!