PAN OS Upgrade with USB Drive

[ForestHill]

Hi 

I am new on Paloalto and want to upgrade PAN OS. Like Cisco or Juniper, we can downloa New OS into USB drive then we can simply upgrade from USB. 

I have searched PAN OS upgrade using USB but seems I can't find the proper guide.

Can someone advise if there is any doc?

PS: My PAN FW is not connected to internet so i can't download directly from PAN OS.

Thanks

Han

[fjwcash]

You can download the file to your local system. Then use the "Upload From File" option under Device tab --> Software to upload the file from your local system to the firewall.

Not 100% sure where to download the PanOS file from, but it should be doable.

Edit:  ah, you download it from the PA Support Portal.

[ForestHill]

let's say my PAN FW is not connected to internet so i can't download the PAN OS into local system. But I can download the PAN OS on my laptop with USB. Then, I would like to insert the USB drive on PAN FW. I used to use upgrade JUNOS or Cisco that way but not sure if I can do on PNA OS.

[fjwcash]

You download it to your laptop while connected to your normal network.

Unplug your laptop and directly connect it to the firewall.

Login to the web interface on the firewall.

Device tab --> Software --> Upload.

Do the upgrade as per normal from there.

[ForestHill]

Thanks for reply. i will try this.

[Chris-Gapske]

I get that you can do it from the web interface .. I don't always have that as an option.  Being able to copy it from the USB like most normal hard would be nice other than a bootable USB either. 
A web browser is not always approved or available. 

[fjwcash]

The other way to do it is to use SSH/SCP to transfer the file to the firewall.  This requires a working network link between the firewall and your station, along with a working SSH/SCP service on your station (we run Linux and FreeBSD on our workstations and laptops, so that's always available).

Check the CLI manual for information on the scp import software command.  Once the OS image file has been imported into the Software Centre on the firewall, then you can initiate an install/upgrade either via the CLI or the web interface.

I've used this process many times to upgrade our unlicensed spare firewall.

Not sure if there's a way to transfer files over the console cable connection.  AFAIK, there's no way to access the USB drive (no commands for mounting filesystems or anything like that).