PAN OS Upgrade 6.0.5 failure and success

[Neo.The.One]

Hello All

Out of the box, my 3050 Firewall had PAN OS 5.0.x and I wanted to upgrade it to.the latest 6.0.5 release. My Firewall does not have internet access yet, and so all the following things were done offline by downloading files on my laptop.

So, I updated Application and Antivirus signatures, uploaded the base image of 6.0.0 to the firewall and then tried to upload the image 6.0.5 to Firewall. It gave me "Operation Failed" notification. Nevertheless, I clicked "Install from file" and I could see the PAN OS 6.0.5 file.

I clicked install. Again after some time, it gave me the "Operation Failed" notification with description "No information available". However, I simply restarted the firewall, and when it came up, the IOS was indeed upgraded to 6.0.5.

Has anyone had such an experience?

Is there any known cause for such a thing?

Thanks a lot!

Amit

[hshah]

Hi Amit,

Its difficult to provide root cause as issue already happened. Practically it should not happen.

Following document provides information on manual upgrade, let me know if you have tried something different than this.

How To Manually Import and Install PAN-OS from the CLI

Regards,

Hardik Shah

[Oleksandr · Accepted solution]

Hi!

Try to install 6.0.0 version first

Regards,

Alex

[dreputi]

Hello Amit,

You can also run the following command and see what it shows:

> debug swm status

Partition         State             Version

--------------------------------------------------------------------------------

sysroot0          REVERTABLE        6.0.0        <<<< Here you need to see whatever previous version you had

sysroot1          RUNNING-ACTIVE    6.0.4    <<<<Here you need to see 6.0.5

maint             READY             6.0.4

You can also see the info in the system logs when the device was rebooted. You will see "Management server started. Running version 6.0.5"

If you do not want to take any chances, you can install 6.0.0 and then upgrade to 6.0.5 so that you can be sure of this.

-Dileep

[Neo.The.One]

Thank you all of you for your answers!