Software upgrade

[jcrab64]

Hi all,

Relatively new to palo and needing to do my first code upgrade. I need to upgrade from 9.1.5 to 10.1.6. This article has confused me a little: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan...

It says download 10.0.0 but doesn’t mention installing it like the the preferred release version. Do I need to download and reboot into 10.0.0?

Thanks

[BPry · Accepted solution]

@jcrab64 

You just need to download it. The firewall will explode both images to disk to build a functional upgrade image for the target maintenance release, to do so the base image simply needs to be downloaded so it has the bits. 

[jcrab64]

Thank you!

[JFelibert]

Please suggest how to upload the base image to VM manually, without internet access

[zahmed01]

Hi @jcrab64,

As @BPry  mentioned you only need to download the base image and then download and install a later 10.0.x version you want to go to.  Then you would download the 10.1.0 base and download and install the 10.1.x version that you want. 

Thanks,

[JFelibert]

Thank you @zahmed01

The issue is that the device is not conencted to Internet and the upload has to be done manually. It is currently in 10.1.11. However, for this KVM NGFW, the base image version PA-VM-KVM-10.2.0.qcow2 says "Invalid Image" when I tried to upload it using GUI: Device > Software.

The procedure is not clear when the device is not connected to the Internet to check images.

[zahmed01]

Hi @JFelibert ,

Since you mentioned that you are running into an issue with the error "Invalid Image" when you try to upload it to the GUI: Device > Software, you should open a case with TAC so they can check with their VM team to see if this is a new issue or what the cause could be and provide tips on how to do it manually for your VM if possible.

Thanks,