software update for PA-820 without support contract

[S_Hiebert]

hello all,

my organization has a PA-820 at a branch location that's been a little neglected. it doesn't have a support contract and it's currently running panos 9.0. I would like to upgrade this at the very least to 9.1, but I'm having difficulty locating the image online to do the upgrade manually. anyone have a link to the software repositories, or other suggestions for how to get this thing upgraded?

it's the only 820 in the org so FTPing an image from another firewall wouldn't be an option. 

[TomYoung]

Hi @S_Hiebert ,

Online images are on the support portal under Updates > Software Updates.  Is "PAN-OS for the PA-800 Platform" available in the drop down?

Thanks,

Tom

[S_Hiebert]

unfortunately it is not. the list jumps from 5200 straight to the vm series. 

[LAYER_8]

Without a valid support contract, you won't be able to access software images for the 820 either on the device or within the portal. Indeed, if no other 820s exist within the org, that won't be something you'll be able to access through official means. 

[S_Hiebert]

if that is the case this is an extreme form of false advertising on the part of PA. I have gone through several PA sanctioned training programs in the past couple months that have all stated that updates are available and can be installed without a support contract, the only requirement is that you must do so by manually importing the image. 

[LAYER_8 · Accepted solution]

What you have said is still true. You are able to import software versions, and content updates, to firewalls with no active subs on them. I have an unlicensed device running in my homelab currently. 

We don't supply you the software or content packs without payment. If you are able to acquire them elsewhere, then they will still function appropriately with manual install. 

[S_Hiebert]

I suppose it's better than some other vendors that will even brick the devices after support runs out, but if you're going to state that updates are still "able to be installed" it's misleading and frankly counter-productive to expect customers to get the images from a disreputable source. 

[LAYER_8]

I understand. Perhaps not a disreputable source, ask a friend/user from another company with 820s, or your account team / partner provider. No guarantees across the board, but, you don't have to scour dark corners of the internet. 

Still able to be installed, is technically correct phrasing. What do you perceive to be more accurate? Say that it is possible, but sourcing images is burden carried by device owner?