Updating PA-200 7.0.x

[santonic]

Hello.

Anyone had issues updating PA-200 on PAN-OS 7.0?

Currently I'm on version 7.0.0. I downloaded PANOS 7.0.2 normally, but when I try to install I get the following message:

"Failed to install 7.0.2 with the following errors. SW version is 7.0.2 Open of /opt/panrepo/releases/7.0.2/base/RPMS/openldap-clients-2.4.23-6.pan.mips.rpm failed: No such file or directory Failed to install version 7.0.2 type panos"

I checked APP version and I found out it's on old version despite having dynamic updates on (set to install, network connectivity ok). I tried manually downloading, it downloads normally but when I try to install I get "Failed to get application version. File doesn't exist".

So I tried manualy uploading file. Again upload was fine but when I click install i get "Failed to get application version. File doesn't exist".

Anyone had similiar issues?

[cpainchaud]

7.0.0 has been decomissioned because of critical issues. You might want to open a TAC case.

[santonic]

I thought it's still possible to move from 7.0.0 without support. So I guess it's not? Would upgrade to 7.0.1 first work maybe?

[cpainchaud]

you can try, yet if it doesnt work, unfortunatly only TAC could help

[reaper · Accepted solution]

Hi

you'll want to download 7.0.1 as this serves as base image for 7.0.2

you won't need to install it but it needs to be present on the system for 7.0.2 to want to install (it specifically looks for the presense of base image 7.0.1 as 7.0.0 was decomissioned)

regards

Tom

[santonic]

Yeah, I thought so. Thank you for help.

[bhudgens]

FYI - I ran into the same issue/error trying to upgrade from 8.05 to 8.08.  As stated in the previous posts in this thread, the issue will be related to your firewall needing the BASE image for the version of PANOS you are running.  In my case, I had the 8.05 software loaded/installed on the firewall, but had deleted the 8.0 base image.  So when I tried to upgrade to 8.08, I got the error reported above.

It's a simple fix, just download the BASE 8.0 image (don't need to install it), just has to be present on the firewall, and then the upgrade will work.  This was in a lab VM of mine which is why I had deleted the base image.  Normally you would not want to delete base images, otherwise you'll have this problem. 

Hope this helps.