upgrading PAN-OS

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

upgrading PAN-OS

L0 Member



I want to upgrade the 8.1.x to the latest version , after two upgrade stay on 8.1.24. I tried to move to 9.0.X but failed. Could you please let me know how I can upgrade to 9.x? (As information that I have find need the Preferred release It means 8.1.25, but I cann't find it)





Hi @Ndexsystems ,

Palo Alto upgrade path is listed here - https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan...

As mentioned from the link above it is recommended (not acutally mandatory) to upgrade first to the latest maintenance release.

As described here - https://live.paloaltonetworks.com/t5/customer-resources/support-pan-os-software-release-guidance/ta-... 8.1 is End-of-Life, except for some hardware platforms. So if there is no 8.1.25, it means such is not available for your device.


Upgrading from 8.1.24 to 9.0 shouldn't be a problem. If you upgrade from 8.1 to 9.0 has failed I would suggest to troubleshoot the reason. Can you share more details of the failed upgrade and why you decided to roll back to 8.1?

I don't want to roll back to 8.1 ,  going for last version 11 .. this is error message that I received when upgrading to 9.0.0: "Upgrading from 8.1.24 to 9.0.0 requires content version of 8103 or greater and found 769-4439 "

Hi @Ndexsystems ,

The error message should be self-explainatory - every major upgrade requires minimum supported version for dynamic content updates. This is also explained here - https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/upgrade-pan-os/pan-os-upgrade-checklist

Verify the minimum content release version.


Minumum content release version is listed in the release notes for each major version - https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes/pan-os-9-1-release-information/ass...


My personal opinion is to always keep the content version to the latest, so instead of installing the minimum, just update the content update to the latest available.


Does your FW has internet connection? Does it has valid support license? If yes, you can update the content update directly from the firewall.

If no intenet connection, you can download content update from support portal and upload it manually.

  • 3 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!