PAN OS Upgrade with USB Drive

Showing results for 
Show  only  | Search instead for 
Did you mean: 

PAN OS Upgrade with USB Drive

L1 Bithead



I am new on Paloalto and want to upgrade PAN OS. Like Cisco or Juniper, we can downloa New OS into USB drive then we can simply upgrade from USB. 

I have searched PAN OS upgrade using USB but seems I can't find the proper guide.


Can someone advise if there is any doc?

PS: My PAN FW is not connected to internet so i can't download directly from PAN OS.





L4 Transporter

You can download the file to your local system. Then use the "Upload From File" option under Device tab --> Software to upload the file from your local system to the firewall.


Not 100% sure where to download the PanOS file from, but it should be doable.


Edit:  ah, you download it from the PA Support Portal.

let's say my PAN FW is not connected to internet so i can't download the PAN OS into local system. But I can download the PAN OS on my laptop with USB. Then, I would like to insert the USB drive on PAN FW. I used to use upgrade JUNOS or Cisco that way but not sure if I can do on PNA OS.


You download it to your laptop while connected to your normal network.

Unplug your laptop and directly connect it to the firewall.

Login to the web interface on the firewall.

Device tab --> Software --> Upload.

Do the upgrade as per normal from there.

Thanks for reply. i will try this.

L1 Bithead

I get that you can do it from the web interface .. I don't always have that as an option.  Being able to copy it from the USB like most normal hard would be nice other than a bootable USB either. 
A web browser is not always approved or available. 

L4 Transporter

The other way to do it is to use SSH/SCP to transfer the file to the firewall.  This requires a working network link between the firewall and your station, along with a working SSH/SCP service on your station (we run Linux and FreeBSD on our workstations and laptops, so that's always available).


Check the CLI manual for information on the scp import software command.  Once the OS image file has been imported into the Software Centre on the firewall, then you can initiate an install/upgrade either via the CLI or the web interface.


I've used this process many times to upgrade our unlicensed spare firewall.


Not sure if there's a way to transfer files over the console cable connection.  AFAIK, there's no way to access the USB drive (no commands for mounting filesystems or anything like that).

  • 6 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!